Tinyauth Hosting Live In 5 Minutes

Tinyauth hosting on xCloud lets you deploy Tinyauth and put a proper login in front of the self-hosted apps that have none, from a server you control. xCloud runs the pinned Tinyauth 5.2.0 image, derives the bcrypt credential for the administrator you choose, mounts a persistent data volume for the database and OIDC signing keys, and publishes it over HTTPS in minutes. Docker discovery is not exposed.

Deploy your Tinyauth

No terminal
No technical skills needed
No lock-in, cancel anytime

What is Tinyauth?

Tinyauth is, in upstream's words, the tiniest OpenID Certified authorization and authentication server you have ever seen. It works as an authentication middleware for your apps, with OAuth, LDAP and access-control support, and as a standalone authentication server. A self-hosted Tinyauth is AGPL-3.0 licensed. Upstream states v5.1.0 is OpenID Certified for the Basic OP profile, and warns it is in active development with configuration that may change often.

On xCloud the template runs Tinyauth 5.2.0 from the official image, pinned by digest, with one local administrator whose credential is configuration-backed. There is no public signup and no Docker discovery or socket access. The SQLite database, OIDC signing keys, sessions and consent state sit on the tinyauth_data volume. You protect each app by following the upstream proxy or OIDC guide.

From Sign-Up to a Live Login Gateway In Just 3 Easy Steps

An auth server normally means a container, a hashed administrator, signing keys, a data volume, a domain and a certificate before the first protected app. This is the same result without assembling any of it.

Step 01
Sign Up
Create your xCloud account and pick Tinyauth from the OneClick catalog. Choose your domain and target server, then set the Administrator Username and either enter your own administrator password or let xCloud generate a strong one.
Step 02
We Deploy It For You
One click. We bring up the official Tinyauth 5.2.0 image, pinned by immutable digest, mount the tinyauth_data volume, and publish it over HTTPS on your domain.
Step 03
Sign In And Protect An App
Open your domain and sign in with the administrator username and generated password. Then follow the upstream proxy or OpenID Connect guide for each application you want to protect.

Everything Tinyauth Does, On Your Own Server

Tinyauth runs in full here: the login page, authorisation rules and the OpenID Connect provider, on a volume you own.

A Login For Apps That Have None
Put Tinyauth in front of a self-hosted app through your reverse proxy and require sign-in before it loads.
OpenID Connect Provider
Apps that speak OIDC can authenticate against Tinyauth directly; signing keys persist on the data volume.
Local Users And OAuth
A configuration-backed local administrator, with OAuth providers configurable per the upstream docs.
No Docker Socket
This template does not expose Docker discovery or the Docker socket.
No Public Signup
The local account comes from configuration; there is no first-visitor ownership claim.
One Data Volume
SQLite database, OIDC keys, resources, sessions and consent state persist on tinyauth_data.

Everything You Need To Run Your Authentication 24/7

Managed hosting for Tinyauth, so the parts that keep it online are not your problem.

Tinyauth 5.2.0 deployed instantly
Official pinned image digest
Administrator credential hashed for you
Kept behind xCloud nginx on port 3000
Free SSL certificate
Server backups and snapshots
Server security updates included
30+ server locations
Unused balance refunded

What You Can Do With Tinyauth

Put a login in front of an app that has none
Use Tinyauth as authentication middleware so a self-hosted tool is only reachable after signing in.
Offer OpenID Connect sign-in to your own apps
Register an application as a client and let it delegate sign-in to Tinyauth instead of keeping its own user table.
Keep sign-in on your own server
Hold the database and OIDC signing keys on a volume you control rather than with a hosted identity provider.
Start small
Run a single local administrator now, then follow the upstream docs to add providers and access rules as your set of apps grows.

Tinyauth vs Alternatives

Hosted login providers: Identity services that run sign-in on the vendor's servers. A Tinyauth alternative to hosted login providers is an OpenID Connect server you run yourself, with the database and keys on your own volume.
Authelia: Authelia has its own OneClick page. In a Tinyauth vs Authelia comparison, both protect self-hosted apps behind a proxy, so compare configuration style and the sign-in methods each supports.
Pocket ID: Pocket ID has its own OneClick page. It is another small OpenID Connect provider, so choose by the login methods and client setup you prefer.
Keycloak: Keycloak has its own OneClick page. It is a full identity and access management suite, while Tinyauth stays a small authentication server with an OpenID Connect provider.

Simple Pricing. Everything Included.

Dedicated Cloud VPS sizes, pre-configured for Tinyauth hosting. Pick the one that fits, and resize any time.

Cloud VPS 6 GB

Cloud VPS 16 GB

More headroom for many users, sessions and OIDC clients.

$59.99per month

16 GB RAM
6 vCPU cores
200 GB NVMe SSD
30 TB
Unlimited

Get started

Cloud VPS 24 GB

Tinyauth next to the apps it protects on one server.

$84.99per month

24 GB RAM
8 vCPU cores
300 GB NVMe SSD
30 TB
Unlimited

Get started

Every size is a dedicated Cloud VPS we provision, patch, monitor and restore. Billed monthly with no lock-in — delete the server and the unused balance comes back to your account.

Docker hosting

Already Have a Server? Bring Your Own

Connect any VPS — DigitalOcean, Vultr, Linode, AWS, Hetzner or bare metal — and deploy Tinyauth on it through the same panel, for a per-server management fee instead of a Cloud VPS rental.

Free

Start your journey without cost.

$0forever

1 server
10 sites

Start free

Starter

Professional

The same platform, discounted at 6–10 servers.

$4per server / month

6–10 servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Agency

The same platform, discounted at 11+ servers.

$3per server / month

11+ servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Priced per connected server, so your rate adjusts automatically as you add or remove servers. You pay your own provider for the server itself.

Self-managed hosting

Ready To Run Your Own Login Gateway?

Tinyauth on xCloud runs on a dedicated Cloud VPS that we provision, patch, monitor and restore. Deploy faster. Own the server. Stay in control.

Fast Provisioning
Deploy faster using an xCloud Managed Server built with optimized stacks and high-speed SSDs.
Enterprise-grade security
Protect your infrastructure with a free SSL certificate and more advanced security features at no additional cost.
Intuitive Control Panel
From Server creation to application deployment, everything can be managed from our intuitive control panel.

Hear what people are saying about us

See why agencies, developers, startups, and growing businesses choose xCloud to power their projects.

xCloud works really well, I am surprised by its performance being this the release version, I have tried many paid platforms such as runcloud, cloudpages or serveravatar, as well as free platforms such as CyberPanel, CloudPanel or Hestia Control Panel and direct competitors such as SpinupWP and FlyWP. Of all those that I have tried, the platform that works best for WordPress is SpinupWP and I believe that xCloud can reach and surpass that development, its roadmap is promising. Congratulations to the xCloud team, I hope they become the leading platform in the segment, it has all the potential to achieve it!

Brian Geovanny

I've been with runcloud for the last 3 years. However, after trying xcloud for the last month, I'm switching over. They are on a roll with their setup.

Kevin Pineda

I'm moving my servers to xCloud, a cloud control panel by M Asif Rahman and the WPDeveloper team. Their roadmap looks interesting and no, there are no team mates nor API limits with xCloud! #xCloud #wordpress #hosting

Leo Koo

How Cloud Nine Web Elevated Client Experience While Streamlining Hosting Operations using xCloud

Ed Ellingham

xCloud is like having an expert server team on call — without the big agency costs. It's given me back my time and given my clients peace of mind. Highly recommended for freelancers and small teams who want reliable performance and security.

Dumitru Butucel

xCloud isn't just a solution. It's like one of that friend who got your back when you screw things up pretty bad.

Waqar Ahmed

Trust me when I say, once people explore the potential of xCloud they gonna switch from other panels, just keep delivering the best tech, lots of love for the team 😍😍

Rahul Singh

So far my experience has been smooth like silk. I didn't imagine that configuring and managing a VPS would be so easy. As of today, I have deployed 8 sites. The support is good, and they treat users with respect, even if they ask stupid questions (myself included). For the future, I hope for greater flexibility in scheduled backups and more comprehensive and consistent documentation. I'm sure that within a few months, xCloud will become the leader in its segment. This community is amazing, and the Staff here is super helpful.

Massimo Villa

Came from cloudways then to runcloud then to xcloud. Looks like I'm staying here.

Gerson El

I've recently taken all of my Vultr-hosted sites and gotten rid of cPanel for them to substitute it with xCloud. I have to say, I'm really impressed with xCloud so far! The interface is definitely the standout feature for me.

Tony Lewis

I came from Cloudways and won't go back. Highly impressed with xCloud. Glad I gave them a chance.

Jared McDowell

I like xCloud better than RunCloud, but one thing I'll point out is that some years ago RunCloud was hungry for business, the support was outstanding, and the community was active and helped each other. Maybe it was sold, there was a change in management, or they stopped being hungry, but the quality of the RunCloud offering declined and it hasn't been moving forward quickly. My point is that currently the xCloud team has the edge and it is theirs to keep or lose

David McCan

How Kevin Heinrichs Cut Hosting Costs by 84% While Running WooCommerce & Node.js Sites Efficiently

Kevin Heinrichs

I had 150 sites on cloudways and am in the process of moving them to xcloud. Much faster and better priced.

Dan Spinoza

Dear xCloud Team, I have been using xCloud for some time now and am genuinely impressed with its capabilities and the flexibility it offers by allowing users to bring their own VPS for management. It's a fantastic service, and my experience so far has been very positive. Successful migrated 5 sites on a single server. Xcloud migration tool worked great. There were few hiccups with security plugin like MalCare but disabling the plugin prior to migration worked just fine.

Rahil Maknojia

Came from runcloud. Tried xcloud and never came back.

Karl Fanega

How Advanced Web Strategies Saved Over $2,000 & Recovered 56 Hours per Month Managing 70+ Client Websites

Gary Moody

xCloud gave me what no other hosting platform could: the flexibility of a VPS with the convenience of managed WordPress. As a solo founder running an entire business on one server, that combination is an important unfair advantage.

Jorge de los Reyes Martínez

I use Server Avatar and xCloud and I'll sooner use xCloud than Server Avatar personally.

Jay Pagano

How Newman Web Solutions Ensured Perfect Uptime and Seamless Scaling For 120+ WordPress Sites with xCloud

Lori Newman

I too have moved over to xCloud. It's pretty sweet. One click n8n and uptime Kuma apps

John Aperture

I went from Cloudways to xCloud. No intention on switching in the foreseeable future.

Blaine Moore

Frequently Asked Questions

Feel free to contact us with any questions or concerns you may have.

Is Tinyauth free?

Yes. Tinyauth is AGPL-3.0 licensed with no charge from the project. You pay for the Cloud VPS, which is lightly loaded by a small Go service and so also hosts the apps that Tinyauth protects.

How much RAM does Tinyauth need?

It needs one core, 512 MB of RAM and 2 GB of disk. A tiny authentication server needs little, so the 6 GB plan is far above it and the same machine can run the apps that Tinyauth protects.

Can you self-host Tinyauth with Docker?

Yes, and this template is Tinyauth Docker hosting without the setup: the official 5.2.0 image pinned by digest, a bcrypt credential derived for your administrator, the tinyauth_data volume and HTTPS on your domain, with no Docker socket access.

How do I change the Tinyauth administrator password?

Update ADMIN_PASSWORD in the Environment editor and restart or redeploy Tinyauth. The account is backed by configuration, so there is no public signup or first-visitor ownership claim, and the new password applies once the app restarts.

Does Tinyauth discover my containers?

No. This template deliberately does not expose Docker discovery or the Docker socket. You configure each protected application or OIDC client by hand, following the upstream proxy or OpenID Connect guide for the app in question.

Is Tinyauth OpenID certified?

Upstream states that Tinyauth v5.1.0 is OpenID Certified for the Basic OP profile as of 25 June 2026. This template runs v5.2.0, so check upstream's certification page for the current status instead of assuming it carries over.

Is Tinyauth stable between releases?

Upstream warns that Tinyauth is in active development and configuration may change often, and asks you to read the release notes before updating. That is why the template pins an exact version and you should test upgrades on a copy.

How do I back up Tinyauth?

Back up the complete tinyauth_data volume: the SQLite database, OIDC signing keys, resources, sessions and consent state. Restore the complete volume with the same image pin before starting Tinyauth, and keep the volume together as one set.

Backups in xCloud

How do I upgrade Tinyauth?

The install stays on Tinyauth 5.2.0 until you adopt a newer template version. Read the upstream release notes, stop the app and take a volume backup first. Roll back with the previous version and its matching backup, because newer data may not downgrade.

Is there a Tinyauth cloud service I can use?

This page is your own Tinyauth cloud: a dedicated Cloud VPS running the open-source server, with your keys and sessions on a volume you control. It is a private instance, not a shared identity service, and you hold the one administrator.

Can I cancel anytime?

Yes. There is no lock-in — cancel any time. Hosting is billed monthly and charged for what you actually use, so when you delete the server the unused balance is refunded to your account, less up to 10% in payment-processing fees.