Saltar al contenido principal
Security

Self-host Authentik on a VPS

A modern open-source identity provider.

SSO, OIDC/SAML, MFA and user management with a clean UI and policy engine for your applications.

Why self-host Authentik?

Authentik gives you an enterprise-style IdP you own, so all your apps share one hardened login.

How to install Authentik

  1. 1

    Provision a VPS

    Choose a plan with room for your data as well as the app.

  2. 2

    Install the stack

    Install Docker Compose (Python, Postgres, Redis).

  3. 3

    Deploy the application

    Follow the project’s official install guide for your distribution.

  4. 4

    Enable HTTPS

    Serve it on your own domain behind a reverse proxy with a certificate.

  5. 5

    Back it up

    Schedule a database dump plus a copy of any uploaded files to an off-box location.

Practical tips

  • Give Authentik its own database user with rights only on its own schema.
  • Reverse-proxy Authentik and terminate TLS at the proxy so certificates are managed in one place.
  • Take a VPS snapshot before major upgrades so you can roll back cleanly.
  • Keep Authentik patched — most self-hosting incidents are unpatched software.

Frequently asked questions

How much RAM does Authentik need?
Plan on 4 GB for typical use; add headroom if you expect many concurrent users.
What stack does Authentik run on?
Docker Compose (Python, Postgres, Redis).
Can I run other things on the same VPS?
Yes — size the plan so Authentik plus your other workloads fit in RAM with room to spare.

Looking for something else? Popular alternatives include Keycloak, Authelia, Zitadel — browse all app guides.