Authorizer Hosting Live In 5 Minutes

Authorizer hosting on xCloud gives you your own self-hosted authentication and authorization server on your own domain. Deploy Authorizer 2.4.1 and xCloud runs the official image with a generated admin secret, JWT signing secret and encryption key, an SQLite database on a persistent volume and HTTPS, ready for your applications to point at in minutes. Signup is off until you turn it on.

Deploy your Authorizer

No terminal
No technical skills needed
No lock-in, cancel anytime

What is Authorizer?

Self-hosted Authorizer is an open-source authentication and authorization server. Upstream says you can connect any supported database, and that it provides a login UI, OAuth 2.0 and OpenID Connect, GraphQL APIs, social login, multi-factor authentication and roles. It is a self-hosted alternative to hosted identity services such as Auth0 and Firebase Authentication, and the repository is licensed under Apache-2.0 at the 2.4.1 tag.

On xCloud the template runs the official lakhansamani/authorizer 2.4.1 image, pinned by digest, as one container with SQLite on the authorizer_data volume; the other database backends upstream supports are not wired up here. A dashboard at /dashboard is protected by the generated admin secret, public signup and email verification are off, and email needs SMTP settings that you add yourself.

From Sign-Up to Your First Login Server In Just 3 Easy Steps

A self-hosted auth server normally means a container, five secrets, flags for every setting, a data directory with the right ownership, a reverse proxy and a certificate. This is the same result without assembling any of it.

Step 01
Sign Up
Create your xCloud account, pick Authorizer from the OneClick catalog and choose a domain. There are no install-form fields to fill in.
Step 02
We Deploy It For You
One click. We start the pinned Authorizer container, generate the admin secret, OAuth client ID and secret, JWT secret and encryption key, mount the authorizer_data volume for the SQLite database and publish the site over HTTPS on your domain.
Step 03
Open The Dashboard And Connect An App
Open /dashboard and sign in with the Admin secret from the credentials panel, then add the exact redirect URI of your application to the OAuth client and point the app at your domain.

Everything Authorizer Does, On Your Own Server

The login UI, the OAuth and OpenID Connect endpoints and the admin dashboard, on a domain you control.

OAuth 2.0 And OpenID Connect
Authorizer exposes OAuth2 and OpenID Connect compatible APIs, so your apps sign users in against your own issuer instead of a third-party one.
Social Login
Upstream supports Google, GitHub, Facebook, LinkedIn, Apple, Discord, Twitter, Twitch, Roblox and Microsoft. This template lets you add Google with GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET.
Multi-Factor And Passkeys
Each user is offered authenticator-app or passkey setup at first login and can skip it. Set ENFORCE_MFA to make it mandatory, or DISABLE_MFA to turn it off.
Admin Dashboard
Manage users, webhooks, email templates, audit logs and OAuth clients from /dashboard, protected by the generated admin secret.
Webhooks
Send events such as user.login to an endpoint you choose, configured from the dashboard.
Roles And Authorization
Upstream includes role-based access management, so you can assign roles to the users who sign in to your applications.

Everything You Need To Run Your Login Server 24/7

Managed hosting for Authorizer, so the parts that keep it online are not your problem.

Authorizer 2.4.1 deployed instantly
Official image pinned by digest
Admin secret and OAuth client generated
Metrics and gRPC ports not published
Free SSL certificate
Server backups and snapshots
Server security updates included
30+ server locations
Unused balance refunded

What You Can Do With Authorizer

An auth server for your applications
A developer points an app at the Authorizer domain for login, using OAuth 2.0 and OpenID Connect with the exact redirect URI set on the client, instead of building sign-in and password handling in-house.
Keep user accounts in your own database
A team that does not want user data held by a hosted identity vendor runs Authorizer on a Cloud VPS, with accounts stored in an SQLite file on a volume it can back up.
Add multi-factor authentication
An admin offers TOTP or passkey setup to each user at first login, requires it by setting ENFORCE_MFA, or turns it off with DISABLE_MFA, then redeploys.
Invite users deliberately
A small product keeps public signup off and invites members from the dashboard once SMTP is configured, or briefly enables signup to register a first account and then closes it again.

Authorizer Screenshots

The Authorizer dashboard overview showing total users, version 2.4.1, the default client ID and recent admin activity

The Authorizer Users page listing a user with roles, verification, access and MFA status and an Invite Members button

The Authorizer Webhooks page with a user.login webhook enabled

Authorizer vs Alternatives

Auth0: Choose Authorizer as an Auth0 alternative when you want the auth server and user records on your own Cloud VPS. This is a category comparison: it makes no feature-by-feature claim, and SMTP and social providers are yours to configure.
Firebase Authentication: Authorizer is a Firebase Authentication alternative that you host yourself, with its own login UI and OAuth 2.0 and OpenID Connect APIs. Upstream lists GraphQL APIs too; the GraphQL playground is disabled in this template.
Keycloak: In an Authorizer vs Keycloak comparison, Keycloak is a self-hosted identity platform with its own OneClick page. Authorizer runs here as one small container with SQLite and a dashboard.
Zitadel: Zitadel is another self-hosted identity service with its own OneClick page. Authorizer's template needs only 128 MB of RAM as a floor and keeps its data in a single SQLite file.
Logto: Logto is a self-hosted sign-in service with its own OneClick page. Authorizer differs by pairing a login UI and dashboard with OAuth clients you create, and by running v2 configuration from flags.

Simple Pricing. Everything Included.

Dedicated Cloud VPS sizes, pre-configured for Authorizer hosting. Pick the one that fits, and resize any time.

Cloud VPS 6 GB

Cloud VPS 16 GB

More headroom if Authorizer runs beside the applications it signs users into.

$59.99per month

16 GB RAM
6 vCPU cores
200 GB NVMe SSD
30 TB
Unlimited

Get started

Every size is a dedicated Cloud VPS we provision, patch, monitor and restore. Billed monthly with no lock-in — delete the server and the unused balance comes back to your account. Authorizer itself is licensed by its maintainers under Apache-2.0.

Docker hosting

Already Have a Server? Bring Your Own

Connect any VPS — DigitalOcean, Vultr, Linode, AWS, Hetzner or bare metal — and deploy Authorizer on it through the same panel, for a per-server management fee instead of a Cloud VPS rental.

Free

Start your journey without cost.

$0forever

1 server
10 sites

Start free

Starter

Professional

The same platform, discounted at 6–10 servers.

$4per server / month

6–10 servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Agency

The same platform, discounted at 11+ servers.

$3per server / month

11+ servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Priced per connected server, so your rate adjusts automatically as you add or remove servers. You pay your own provider for the server itself.

Self-managed hosting

Ready To Run Your Own Sign-In?

Authorizer on xCloud runs on a dedicated Cloud VPS that we provision, patch, monitor and restore. Deploy faster. Own the server. Stay in control of user data.

Fast Provisioning
Deploy faster using an xCloud Managed Server built with optimized stacks and high-speed SSDs.
Enterprise-grade security
Protect your infrastructure with a free SSL certificate and more advanced security features at no additional cost.
Intuitive Control Panel
From Server creation to application deployment, everything can be managed from our intuitive control panel.

Hear what people are saying about us

See why agencies, developers, startups, and growing businesses choose xCloud to power their projects.

xCloud works really well, I am surprised by its performance being this the release version, I have tried many paid platforms such as runcloud, cloudpages or serveravatar, as well as free platforms such as CyberPanel, CloudPanel or Hestia Control Panel and direct competitors such as SpinupWP and FlyWP. Of all those that I have tried, the platform that works best for WordPress is SpinupWP and I believe that xCloud can reach and surpass that development, its roadmap is promising. Congratulations to the xCloud team, I hope they become the leading platform in the segment, it has all the potential to achieve it!

Brian Geovanny

I've been with runcloud for the last 3 years. However, after trying xcloud for the last month, I'm switching over. They are on a roll with their setup.

Kevin Pineda

I'm moving my servers to xCloud, a cloud control panel by M Asif Rahman and the WPDeveloper team. Their roadmap looks interesting and no, there are no team mates nor API limits with xCloud! #xCloud #wordpress #hosting

Leo Koo

How Cloud Nine Web Elevated Client Experience While Streamlining Hosting Operations using xCloud

Ed Ellingham

xCloud is like having an expert server team on call — without the big agency costs. It's given me back my time and given my clients peace of mind. Highly recommended for freelancers and small teams who want reliable performance and security.

Dumitru Butucel

xCloud isn't just a solution. It's like one of that friend who got your back when you screw things up pretty bad.

Waqar Ahmed

Trust me when I say, once people explore the potential of xCloud they gonna switch from other panels, just keep delivering the best tech, lots of love for the team 😍😍

Rahul Singh

So far my experience has been smooth like silk. I didn't imagine that configuring and managing a VPS would be so easy. As of today, I have deployed 8 sites. The support is good, and they treat users with respect, even if they ask stupid questions (myself included). For the future, I hope for greater flexibility in scheduled backups and more comprehensive and consistent documentation. I'm sure that within a few months, xCloud will become the leader in its segment. This community is amazing, and the Staff here is super helpful.

Massimo Villa

Came from cloudways then to runcloud then to xcloud. Looks like I'm staying here.

Gerson El

I've recently taken all of my Vultr-hosted sites and gotten rid of cPanel for them to substitute it with xCloud. I have to say, I'm really impressed with xCloud so far! The interface is definitely the standout feature for me.

Tony Lewis

I came from Cloudways and won't go back. Highly impressed with xCloud. Glad I gave them a chance.

Jared McDowell

I like xCloud better than RunCloud, but one thing I'll point out is that some years ago RunCloud was hungry for business, the support was outstanding, and the community was active and helped each other. Maybe it was sold, there was a change in management, or they stopped being hungry, but the quality of the RunCloud offering declined and it hasn't been moving forward quickly. My point is that currently the xCloud team has the edge and it is theirs to keep or lose

David McCan

How Kevin Heinrichs Cut Hosting Costs by 84% While Running WooCommerce & Node.js Sites Efficiently

Kevin Heinrichs

I had 150 sites on cloudways and am in the process of moving them to xcloud. Much faster and better priced.

Dan Spinoza

Dear xCloud Team, I have been using xCloud for some time now and am genuinely impressed with its capabilities and the flexibility it offers by allowing users to bring their own VPS for management. It's a fantastic service, and my experience so far has been very positive. Successful migrated 5 sites on a single server. Xcloud migration tool worked great. There were few hiccups with security plugin like MalCare but disabling the plugin prior to migration worked just fine.

Rahil Maknojia

Came from runcloud. Tried xcloud and never came back.

Karl Fanega

How Advanced Web Strategies Saved Over $2,000 & Recovered 56 Hours per Month Managing 70+ Client Websites

Gary Moody

xCloud gave me what no other hosting platform could: the flexibility of a VPS with the convenience of managed WordPress. As a solo founder running an entire business on one server, that combination is an important unfair advantage.

Jorge de los Reyes Martínez

I use Server Avatar and xCloud and I'll sooner use xCloud than Server Avatar personally.

Jay Pagano

How Newman Web Solutions Ensured Perfect Uptime and Seamless Scaling For 120+ WordPress Sites with xCloud

Lori Newman

I too have moved over to xCloud. It's pretty sweet. One click n8n and uptime Kuma apps

John Aperture

I went from Cloudways to xCloud. No intention on switching in the foreseeable future.

Blaine Moore

Frequently Asked Questions

Feel free to contact us with any questions or concerns you may have.

Is Authorizer free and open source?

Yes. Authorizer is licensed under Apache-2.0, so using it costs nothing in licences. xCloud charges for the dedicated Cloud VPS underneath. This template adds no paid Authorizer tier, and your users stay in your own SQLite file.

Can I run Authorizer with Docker?

Yes, and this template does it for you: the official lakhansamani/authorizer 2.4.1 image, pinned by digest, as one container with authorizer_data mounted and HTTPS in front. It is Authorizer Docker hosting; v2 reads command-line flags, which the template builds from your environment.

Docker hosting on xCloud

How much RAM does an Authorizer cloud server need?

Authorizer's floor is just 128 MB of RAM, 1 CPU core and 2 GB of disk, so an Authorizer cloud server is very small. The 6 GB Cloud VPS sold here leaves room for other apps on the same server.

Does Authorizer support OpenID Connect?

Yes. Upstream documents OAuth 2.0 and OpenID Connect, and the template seeds a reserved OAuth client. Create more clients in the dashboard with each application's exact redirect URI, and add other origins to ALLOWED_ORIGINS if an app lives on another domain.

How do I add users to Authorizer?

The dashboard has no create-user action in this version, and public signup is off. Either configure SMTP and use Invite Members, or set ENABLE_SIGNUP to true, redeploy, register at the signup page, then set it back to false and redeploy again.

Does Authorizer support two-factor authentication?

Yes. Authorizer 2.4.x offers TOTP or passkey setup to each user at first login, and they may skip it. Set ENFORCE_MFA to true to require it or DISABLE_MFA to true to turn it off, then redeploy. Keep ENCRYPTION_KEY stable once users enrol TOTP.

How do I sign in to the Authorizer dashboard?

Open /dashboard on your domain and sign in with the generated admin secret from your credentials. It is a dashboard password, not a user account. Your credentials also show the reserved OAuth client ID and secret, which is seeded once and not rotated by later edits.

How do I back up Authorizer?

Take a backup of the authorizer_data volume, which holds the data.db SQLite file with your users. Keep the admin secret, JWT secret and encryption key with it, because encrypted TOTP secrets cannot be read without the key. Test a restore before you rely on it.

Backups in xCloud

How do I update Authorizer?

Updates are not automatic: each install runs Authorizer 2.4.1 pinned by digest. To move to a newer release, back up authorizer_data with the generated secrets, then adopt a newer xCloud template version once one is published, and confirm sign-in.

Can I cancel anytime?

Yes. There is no lock-in — cancel any time. Hosting is billed monthly and charged for what you actually use, so when you delete the server the unused balance is refunded to your account, less up to 10% in payment-processing fees.