Amazon Cognito vs Authy

Overview

Authy

Stacks162

Followers174

Votes1

Amazon Cognito

Stacks616

Followers917

Votes34

Amazon Cognito vs Authy: What are the differences?

Amazon Cognito: Securely manage and synchronize app data for your users across their mobile devices. You can create unique identities for your users through a number of public login providers (Amazon, Facebook, and Google) and also support unauthenticated guests. You can save app data locally on users’ devices allowing your applications to work even when the devices are offline; Authy: The easiest way to add Two-Factor Authentication to any website or app. We make the best rated Two-Factor Authentication smartphone app for consumers, a Rest API for developers and a strong authentication platform for the enterprise.

Amazon Cognito and Authy are primarily classified as "User Management and Authentication" and "Security" tools respectively.

Some of the features offered by Amazon Cognito are:

Manage Unique Identities
Work Offline
Store and Sync across Devices

On the other hand, Authy provides the following key features:

Very secure- We take security seriously. We use industry standard secure algorithms (HMAC RFC 4426) and 256 bits keys which are always encrypted at rest.
Fully redundant- The Authy API is deployed accross different PCI level 1 data-centers and it's fully redundant. We also use a DNS provider with anycast support. We've had 100% availability since 2011.
Great user experience- You connect to Authy using a transparent REST API which allows you to customize the experience you want for your users.

Sendhelper Pte Ltd, Strain Merchant, and ChromaDex are some of the popular companies that use Amazon Cognito, whereas Authy is used by Chargify, Coinbase, and DuckDuckGo. Amazon Cognito has a broader approval, being mentioned in 40 company stacks & 12 developers stacks; compared to Authy, which is listed in 18 company stacks and 5 developer stacks.

Share your Stack

Help developers discover the tools you use. Get visibility for your team's tech choices and contribute to the community's knowledge.

View Docs

CLI (Node.js)

Manual

Advice on Authy, Amazon Cognito

Brent

CEO at DEFY Labs

Mar 7, 2020

Decided

I started our team on Amazon Cognito because I was a Solutions Architect at AWS and found it really easy to follow the tutorials and get a basic app up and running with it.

When our team started working with it, they very quickly became frustrated because of the poor documentation. After 4 days of trying to get all the basic passwordless auth working, our lead engineer made the decision to abandon it and try Auth0... and managed to get everything implemented in 4 hours.

The consensus was that Cognito just isn't mature enough or well-documented, and that the implementation does not cater for real world use cases the way that it should. I believe Amplify has made some of this simpler, but I would still recommend Auth0 as it's been bulletproof for us, and is a sensible price.

297k views297k

Comments

Detailed Comparison

Authy	Amazon Cognito
We make the best rated Two-Factor Authentication smartphone app for consumers, a Rest API for developers and a strong authentication platform for the enterprise.	You can create unique identities for your users through a number of public login providers (Amazon, Facebook, and Google) and also support unauthenticated guests. You can save app data locally on users’ devices allowing your applications to work even when the devices are offline.
Very secure- We take security seriously. We use industry standard secure algorithms (HMAC RFC 4426) and 256 bits keys which are always encrypted at rest.;Fully redundant- The Authy API is deployed accross different PCI level 1 data-centers and it's fully redundant. We also use a DNS provider with anycast support. We've had 100% availability since 2011.;Great user experience- You connect to Authy using a transparent REST API which allows you to customize the experience you want for your users.;Fully mobile- We support any cellphone. We provide apps for all major phones (iPhone and Android) as well as text-messages for other cellphones.;No expensive & complex setups- Hardware dongles, servers, software licenses, setup costs...It's 2013, forget all that. Authy is bringing two-factor authentication to the present.	Manage Unique Identities;Work Offline;Store and Sync across Devices;Seamless Guest Access;Safeguard AWS Credentials;Control Access to AWS Resources
Statistics
Stacks 162	Stacks 616
Followers 174	Followers 917
Votes 1	Votes 34
Pros & Cons
Pros 1 Google Authenticator-compatible Cons 2 Terrible UI on mobile	Pros 14 Backed by Amazon 7 Manage Unique Identities 4 Work Offline 3 MFA 2 Store and Sync Cons 4 Massive Pain to get working 3 Documentation often out of date 2 Login-UI sparsely customizable (e.g. no translation) 1 Difficult to customize (basic-pack is more than humble) 1 MFA: there is no "forget device" function
Integrations
WordPress CloudFlare	No integrations available

What are some alternatives to Authy, Amazon Cognito?

Auth0

A set of unified APIs and tools that instantly enables Single Sign On and user management to all your applications.

Stormpath

Stormpath is an authentication and user management service that helps development teams quickly and securely build web and mobile applications and services.

Keycloak

It is an Open Source Identity and Access Management For Modern Applications and Services. It adds authentication to applications and secure services with minimum fuss. No need to deal with storing users or authenticating users. It's all available out of the box.

Let's Encrypt

It is a free, automated, and open certificate authority brought to you by the non-profit Internet Security Research Group (ISRG).

Devise

Devise is a flexible authentication solution for Rails based on Warden

Firebase Authentication

It provides backend services, easy-to-use SDKs, and ready-made UI libraries to authenticate users to your app. It supports authentication using passwords, phone numbers, popular federated identity providers like Google,

Sqreen

Sqreen is a security platform that helps engineering team protect their web applications, API and micro-services in real-time. The solution installs with a simple application library and doesn't require engineering resources to operate. Security anomalies triggered are reported with technical context to help engineers fix the code. Ops team can assess the impact of attacks and monitor suspicious user accounts involved.

Instant 2FA

Add a powerful, simple and flexible 2FA verification view to your login flow, without making any DB changes and just 3 API calls.

WorkOS

Start selling to enterprise customers with just a few lines of code.

OAuth.io

OAuth is a protocol that aimed to provide a single secure recipe to manage authorizations. It is now used by almost every web application. However, 30+ different implementations coexist. OAuth.io fixes this massive problem by acting as a universal adapter, thanks to a robust API. With OAuth.io integrating OAuth takes minutes instead of hours or days.

Related Comparisons

Some of the features offered by Amazon Cognito are:

Manage Unique Identities
Work Offline
Store and Sync across Devices

On the other hand, Authy provides the following key features:

Very secure- We take security seriously. We use industry standard secure algorithms (HMAC RFC 4426) and 256 bits keys which are always encrypted at rest.
Fully redundant- The Authy API is deployed accross different PCI level 1 data-centers and it's fully redundant. We also use a DNS provider with anycast support. We've had 100% availability since 2011.
Great user experience- You connect to Authy using a transparent REST API which allows you to customize the experience you want for your users.

Amazon Cognito vs Authy