Better Auth

The most comprehensive authentication framework for TypeScript.

[Vercel Developers @vercel_dev]

We have automatically applied WAF protections for Vercel users.

For full mitigation, update to a patched version of Better Auth.

Bulletin: https://t.co/sFBnGNzrHW

[Better Auth @better_auth]

November 2026, Security Update

Better Auth v1.7.16 and v1.8.0-beta.5 are now available on npm. Upgrade to the fixed version of your release line

https://t.co/bGs1ta1do3

[Better Auth @better_auth]

We are preparing a security release for Better Auth, scheduled for Tuesday, November 3, 2026.

The related advisories will be published on GitHub Security Advisories at the same time.

Learn more: https://t.co/bGs1ta1do3

[Beka @bekacru]

Note:

We didn't make this announcement because we were facing a particularly serious issue. We release security updates in batch as we get access to frontier models through OSS security programs frontier models have and we wanted to make teams running versions outside the covered release lines time to upgrade

[Better Auth @better_auth]

We are preparing a security release for Better Auth, scheduled for Tuesday, November 3, 2026.

The related advisories will be published on GitHub Security Advisories at the same time.

Learn more: https://t.co/bGs1ta1do3

[Beka @bekacru]

Better Auth is now at 10m weekly downloads!

[Jonathan Wilke @jonathan_wilke]

I want to give a shoutout to all open-source tools (and their maintainers) like @better_auth, @nextjs, @tan_stack and so on.

It's easy to forget that what you guys build, is the reason that we can now vibe-code apps that are actually good.

A lot of appreciation for you 🫶🏼

[Yonas Beshawred @yonasbe]

Our CLI stack:

- @bunjavascript: compiles it to one static binary
- Ink (@vadimdemedes): the TUI
- @better_auth: social sign-in and device-code
- @arktypeio: end-to-end typesafety

API stack:

- @elysiaJS (@saltyAom): the routes, published as OpenAPI
- @nitrojsdev: packages and deploys the server
- @vercel: hosting
- @PlanetScale + @DrizzleORM: Postgres for identity, orgs, API keys
- @upstash: session lookups that skip the db
- @ClickHouseDB: every runs / jobs / top / usage query
- @github: identity and raw job log ingest
- @stripe: sling bill

[Better Auth @better_auth]

https://t.co/lUTyg2YPZR

[Better Auth @better_auth]

Better Auth v1.7 is here!

[Better Auth @better_auth]

Better Auth is joining Vercel.

Vercel shares our commitment to keeping auth open source, framework and platform agnostic. Joining forces gives us more resources and room to focus on building the framework that much of the community relies on.

Together, we’ll also be able to invest more deeply in where auth is heading: a future where agents act on users’ behalf and need secure, scoped, and revocable access.

[Max @PingStruggles]

We've reached the 10,000th PR on @better_auth 🥳

[Dr. Kitze ❤️ healthmaxx.app @thekitze]

i'm too stubborn to simply give up on the concept of @benjiDotSo after almost 10 years(!!) of iterating on it with different stacks...

2018: graphql backend + react SPA
2019: made a react native app for 6 months
2020: gave up on it and wrote https://t.co/V2GaQ5L4cm
3 years of using other bs tools and being grumpy about them
2023: rewrote it in blitz js (JUGE mistake)
2024: iterate on react native + PWA + RN pwa wrapper
2025: time for a rewrite to @zerotoshipped stack (but next js sucks for this kind of app, add api, mcp, cross platform app, and many other things
2026: i want it all actions INSTANT AND FAST AF and next js is the wrong tech choice for a mostly client app, so i'm starting a rewrite with @tan_stack + @convex + @better_auth

it feels so snappy 😭

btw 99% of the customers abandoned it, there are like 3 ride or die fans but i know i can turn it around!!!! let /goal cook.

[Strapi @strapijs]

🚀 The @better_auth Plugin for Strapi 5 is now in Beta!

After a lot of work from the community, the first beta release of the Better Auth plugin by Boaz Poolman for Strapi is officially here.

This plugin brings:
✅ Better Auth integration for @strapijs 5
✅ Content API permissions support
✅ Flexible and extensible authentication workflows
✅ Full ownership of your users and auth data
✅ Open-source customization for modern applications

There’s now also a dedicated documentation website to help you get started quickly:

👉 https://t.co/vPDxN0QrST

Huge shoutout to everyone involved in building and testing this plugin and community contributors helping shape the future of authentication in Strapi. 🙌

If you’ve been waiting for a modern, extensible auth solution for Strapi, now’s the perfect time to test it and share feedback.

[Strapi @strapijs]

SF folks: we’re hosting a meetup @strapijs × @vercel × @better_auth tomorrow!

If you’re a developer working on content apps, auth, or modern frontends, this one’s for you.

📍 @MuxHQ on Market (SF)
🗓 Tue, May 12 · 5:30–8:30 PM
3 quick talks by @paola3decampos @pierre_burgy and @MarcBaiza + networking
RSVP link (Seats are limited.) https://t.co/Ja5SBGDHis

[Val Town @ValDotTown]

We had a bad time relying on a third-party auth provider and are now having a good time using open source, specifically @better_auth https://t.co/eqYzr6luk9

[Strapi @strapijs]

Happening tomorrow! 🥳

Join us this Thursday, May 7, for a 60-minute live session with Bereket, founder of @better_auth, and the @strapijs team.

We will cover:
🔐 The case for owning your auth
🤖 Agent Auth Protocol
🛠️ Live Strapi + Better Auth demo

Free. Open source. MIT licensed. Self-hosted. No black box.

📅 May 7 — 8:00 AM PST (~60 min)

👉 Register here: https://t.co/2Z4mgeaTFA

[Pierre Burgy - Strapi.io | Fimo.ai @pierre_burgy]

We are organizing a meetup with our friends at @better_auth, @MuxHQ, and @vercel!

Where? SF 🌁
When? May 12

Register now: https://t.co/eeqNrwGUcL

@MarcBaiza @aureliengeorget @vcoisne

[Sriram @tsriram]

If you're on @better_auth, Chargebee is now a plugin away.

Auth and billing, configured in one place. Customers, subscriptions, checkout, portal, webhooks. All handled.

Docs → https://t.co/pAkYkDIvwa

[Hugo @hugorcd]

evlog x @better_auth is here

Your logs now know exactly who triggered each request. User info, session metadata, context... all there automatically.

What this means:
• No more manual user tagging
• No more anonymous events
• Full user context on every log
• Zero extra code per endpoint

Goes from "POST /api/checkout failed" to "John's checkout failed at 10:23 with session X"

https://t.co/UuLP7iKqey