Frequently Asked Questions

voult.dev is a developer-first authentication platform. We provide secure APIs, lightweight SDKs, OAuth integrations, magic links, JWT handling, and pre-built UI kits so you can add authentication to your application in minutes instead of weeks.

Building authentication correctly is hard. You need to handle password hashing, JWT rotation, CSRF protection, rate limiting, email verification, password resets, OAuth flows, and session management, all while staying up to date with security best practices. voult.dev handles all of that for you, so you can focus on building your product.

voult.dev provides a set of APIs and SDKs that handle the entire authentication lifecycle. You integrate our SDK into your application, configure your auth flows (email/password, OAuth, magic links), and our platform handles the rest. We manage user sessions, token refresh, security events, and provide a dashboard for monitoring.

Voult supports Node.js and Express today: @voult/express gives you a mountable auth router, @voult/sdk is the JavaScript client, and @voult/cli scaffolds your configuration. Any frontend (React, Vite, plain HTML) can call the router over fetch. React components and a Next.js integration are planned.

Voult is in active development and not open for sign-ups yet; launch is planned for early 2027. The docs show how the integration works. The packages are already on npm: @voult/express, @voult/sdk and @voult/cli. For early questions, reach out via our Contact page.

The MVP includes email/password and username sign-in, OAuth (Google, GitHub, Microsoft, Apple, Facebook, LinkedIn), magic links, email verification and password reset, MFA with TOTP and backup codes, passkeys, JWT access tokens with rotating refresh tokens, rate limiting, CSRF protection, an audit log, and a developer dashboard for apps, credentials and OAuth configuration.

Pricing details will be announced closer to launch. For questions about plans or early access, reach out via our Contact page.

Security controls are on by default: bcrypt password hashing, short-lived access tokens with rotating refresh tokens and reuse detection, account lockout after repeated failed logins, rate limiting, CSRF protection, Helmet security headers, IP allowlists, and a risk-scored audit log of authentication events.

Self-hosting is on our roadmap. Initially, voult.dev will be offered as a managed service for the best developer experience and security guarantees. We're exploring self-hosted options based on community demand.

For questions before launch, reach out via our Contact page or open an issue on our GitHub repository.

You can reach us through our Contact page, or open an issue on our GitHub repository.