---
title: "Auth Templates: Deploy Keycloak, Vaultwarden, and More"
description: "Deploy authentication templates on Railway in one click. Run Keycloak, Vaultwarden, and other identity tools on always-on infrastructure."
url: https://railway.com/deploy/category/authentication
---

# Deploy authentication services in one click

Templates in this category deploy identity and security services in one click. Keycloak covers SSO, MFA, and OIDC. Vaultwarden runs a Bitwarden compatible password vault. Infisical manages secrets, and Cap adds a self-hosted CAPTCHA.

Each template creates the service with its database and variables preconfigured in your own project, running 24/7 with usage based pricing and a free trial.

## Common questions about Authentication templates

### How do I self-host Keycloak?

Deploy a Keycloak template and Railway creates the service with its configuration preconfigured. It runs on always-on servers, so sign-ins work around the clock.

### Can I run a self-hosted password manager?

Yes. Vaultwarden, a Bitwarden compatible server, deploys in one click and keeps its data inside your own project.

### Do authentication templates work with my existing app?

Yes. Services in the same project connect over private networking, and standard protocols like OIDC work the same as anywhere else.

### Is my authentication service always on?

Yes. Templates run on always-on servers with no cold starts, which matters for login flows. Nothing sleeps unless you turn on App Sleeping.

## Related

- Browse all templates: https://railway.com/deploy
- Railway docs: https://docs.railway.com

## All 84 authentication templates

- [Cap](https://railway.com/deploy/cap-1) - The self-hosted CAPTCHA for the modern web. Official template for Railway.
- [API Key Manager](https://railway.com/deploy/api-key-manager) - Deploy and Host API Key Manager with Railway
- [Vaultwarden | Open Source Bitwarden Alternative](https://railway.com/deploy/vaultwarden-password-manager) - Self Host Vaultwarden: Encrypted passwords, 2FA, organizations & more
- [Keycloak Identity Management | Open-Source Alternative to Auth0](https://railway.com/deploy/keycloak) - Self Host Keycloak: SSO, MFA, LDAP federation, OIDC on Railway
- [Keycloak](https://railway.com/deploy/mSwigX) - Keycloak template with keywind theme + apple and discord providers
- [Docuseal (Open-Source E-Signature & Document Signing Service)](https://railway.com/deploy/docuseal) - Docuseal [Jul ’26] (DocuSign & HelloSign alternative) Self Host
- [Infisical — Open Source Doppler, HashiCorp Vault Alternative](https://railway.com/deploy/infisical-secrets-manager) - Self Host Infisical, Manage API keys, certs, & other secrets on Railway
- [lua-protector](https://railway.com/deploy/lua-protector) - Test deployed my project first
- [Passbolt | Open Source Team Password Manager](https://railway.com/deploy/passbolt) - Self Host Passbolt. Team password vault with end-to-end encryption
- [DocuSeal – Open-Source DocuSign, PandaDoc Alternative on Railway](https://railway.com/deploy/docuseal-docusign-alternative) - Self-host DocuSeal — Unlimited E-Signature & PDF Signing
- [Logto](https://railway.com/deploy/logto) - Modern open-source auth with multi-tenancy, SSO, and RBAC
- [Authentik | Open Source Okta, Auth0 Alternative on Railway](https://railway.com/deploy/authentik) - Self Host Authentik - OAuth2, SAML, LDAP, MFA and more.
- [Zitadel](https://railway.com/deploy/zitadel) - Deploy a modern IAM solution with Zitadel on Railway in minutes.
- [Nango Production Template](https://railway.com/deploy/nango-production-template) - [Updated Jul 2026] Connect your product & AI agents with 800+ APIs.
- [nginx-password-auth](https://railway.com/deploy/nginx-password-auth) - Put any service behind a username / password
- [Sshwifty](https://railway.com/deploy/sshwifty) - An open-source web-based SSH and Telnet client.
- [Pocket ID](https://railway.com/deploy/vdYVQD) - A simple and easy-to-use OIDC provider
- [SuperTokens | Open Source Auth0, AWS Cognito, Okta Alternative](https://railway.com/deploy/supertokens) - Self Host SuperTokens. Email, Social & Passwordless Authentication
- [tailscale-vpn](https://railway.com/deploy/terrific-vitality) - VPN Tailscale Userspace ligera. Incluye Exit Node y Proxy SOCKS5.
- [Authorizer](https://railway.com/deploy/authorizer) - Open-source authentication and authorization solution for your business.
- [Logto: Identity and Access Management (IAM)](https://railway.com/deploy/K_cg9u) - The better auth and identity infrastructure
- [SuperTokens](https://railway.com/deploy/i1xFfT) - SuperTokens — User Authentication
- [DocuSeal - Document Signing](https://railway.com/deploy/docuseal-document-signing) - Open-source DocuSign alternative for self-hosted document signing.
- [Vaultwarden with PostgreSQL on Railway](https://railway.com/deploy/vaultwarden-with-postgresql-on-railway) - Vaultwarden on Railway with PostgreSQL and persistent /data storage.
- [Email authenticator](https://railway.com/deploy/Coitf7) - Email Authentication service.
- [Nango](https://railway.com/deploy/nango) - [Updated Jul 2026] Connect your product & AI agents with 800+ APIs.
- [Pocket ID](https://railway.com/deploy/pocket-id-2) - A simple, self-hosted OIDC provider with passkey-only authentication.
- [Hemmelig.app](https://railway.com/deploy/hemmeligapp) - Hemmelig - Encrypted Secret Sharing
- [Authelia | Lightweight Open Source Keycloak Alternative](https://railway.com/deploy/authelia) - Self-Host Authelia -  SSO, TOTP, WebAuthn, OpenID Connect, forward auth
- [Zitadel](https://railway.com/deploy/zitadel-1) - A fully configured Zitadel instance with an optional V2 Login UI.
- [VPN border0](https://railway.com/deploy/overflowing-caring) - Deploy and Host overflowing-caring with Railway
- [Permify](https://railway.com/deploy/permify) - Open-source fine-grained authorization inspired by Google Zanzibar
- [Cap](https://railway.com/deploy/cap) - Self-hosted CAPTCHA for the modern web.
- [caddy-password-auth](https://railway.com/deploy/caddy-password-auth) - A lightweight Caddy reverse proxy with HTTP Basic Authentication.
- [Caddy Auth Proxy](https://railway.com/deploy/caddy-zero-trust) - A lightweight Caddy-based authentication proxy that protects services.
- [Better Auth](https://railway.com/deploy/VOQsdL) - A ready to use auth server! Secure by default and extremely configurable.
- [Agora Token Deployment](https://railway.com/deploy/agora-token-deployment) - Token generator for Agora RTM, Video SDK, and Chat.
- [Logto](https://railway.com/deploy/logto-1) - Logto — open-source auth for SaaS. OIDC, OAuth 2.1, SSO, RBAC.
- [Authorizer | Self-Hosted Auth with Postgres, Zero Setup Questions](https://railway.com/deploy/authorizer-or-self-hosted-auth-with-post) - Self-host Authorizer on Railway: keys generated, nothing to fill in first
- [keycloak](https://railway.com/deploy/keycloak-1) -  Self-hosted Keycloak 26.x with PostgreSQL — deploy in minutes
- [Keycloak — Self-Hosted Auth0 Alternative with SSO](https://railway.com/deploy/keycloak-auth0-alternative) - Self-host Keycloak: SSO, OIDC, SAML. No per-MAU fees. Apple & Discord login
- [Pocket ID](https://railway.com/deploy/pocket-id-3) - A simple OIDC provider that enables authentication with passkeys.
- [NetBird Peer Client](https://railway.com/deploy/netbird-peer-client) - Deploy a NetBird peer to connect your service directly to your network.
- [casdoor](https://railway.com/deploy/casdoor) - Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway
- [PhaseTwo Keycloak](https://railway.com/deploy/phasetwo-keycloak) - Keycloak with extensions for orgs, events, themes, and more.
- [FusionAuth](https://railway.com/deploy/fusionauth) - Customer Identity and Access Management (CIAM) platform
- [tsidp](https://railway.com/deploy/tsidp) - A simple OIDC / OAuth Identity Provider (IdP) server for your tailnet.
- [OpenFGA](https://railway.com/deploy/openfga) - Deploy and host OpenFGA with Railway
- [Logto (Auth)](https://railway.com/deploy/07_f_Z) - 🧑‍🚀 The better identity infrastructure for developers
- [oauth2-proxy](https://railway.com/deploy/RfKH-J) - Reverse proxy that provides auth with Google and more identity providers
- [Supabase Auth](https://railway.com/deploy/vKtend) - Authentication and User Management by Supabase
- [BoxyHQ / Jackson SSO](https://railway.com/deploy/xV6lZy) - Security Building Blocks For Developers
- [Casdoor](https://railway.com/deploy/OJXBP4) - A UI-first Identity Access Management (IAM) / Single-Sign-On (SSO) platform
- [Authentik](https://railway.com/deploy/nBQI2d) - Open-source Identity Provider that emphasizes flexibility and versatility.
- [railway-docker-nginx-basic-auth](https://railway.com/deploy/bYH8Xt) - Add basic auth to your web app.
- [Zitadel — Modern Open Source IAM & Identity Platform](https://railway.com/deploy/zitadel-iam-identity-platform) - Self-host Zitadel — modern IAM with OIDC, SAML & multi-tenancy
- [Pocket ID — Passkey-Only OIDC Provider](https://railway.com/deploy/pocket-id-passkey-oidc) - Self-host Pocket ID — passwordless passkey SSO for your apps
- [Infisical — Open Source Secrets Manager & Vault](https://railway.com/deploy/infisical-secrets-vault) - Self-host Infisical — manage API keys, secrets & certs securely
- [Authorizer — Open Source Auth + AI Authorization](https://railway.com/deploy/authorizer-auth-openfga) - Self-host Authorizer — auth, login UI & permission-aware AI
- [SuperTokens — Open Source Auth for Your App](https://railway.com/deploy/supertokens-auth-core) - Self-host SuperTokens — email, social & passwordless auth SDK
- [Basic Auth Proxy — Password-Protect Any Service](https://railway.com/deploy/basic-auth-proxy) - Put any service behind a username & password — nginx proxy
- [Authentik — Self-Hosted SSO, OAuth2, SAML & LDAP](https://railway.com/deploy/authentik-sso-identity-provider) - Self-host Authentik — SSO, OAuth2, SAML, LDAP & MFA identity
- [Passbolt — Open Source Team Password Manager](https://railway.com/deploy/passbolt-team-password-manager) - Self-host Passbolt — end-to-end encrypted team password vault
- [Logto — Open-Source Auth, SSO & Multi-Tenancy](https://railway.com/deploy/logto-auth-sso-rbac) - Self-host Logto — modern auth with SSO, RBAC & multi-tenancy
- [Vaultwarden](https://railway.com/deploy/vaultwarden-6) - Self-hosted Bitwarden-compatible password manager server.
- [vaultwarden](https://railway.com/deploy/vaultwarden-4) - Lightweight self-hosted Bitwarden-compatible password manager in Rust
- [aliasvault](https://railway.com/deploy/aliasvault-railway) - AliasVault is a privacy-first password manager with built-in email aliasing
- [Unkey API Management](https://railway.com/deploy/unkey-api-management) - One-click deploy for Unkey API, including MySQL and Redis.
- [Turnstile](https://railway.com/deploy/turnstile) - A reverse proxy that authenticates users via Railway's OAuth flow.
- [Spicedb](https://railway.com/deploy/spicedb) - Deploying Authzed Spicedb
- [Fusio - API Management Platform](https://railway.com/deploy/fusio-api-management-platform) - fusio 6.2 Self-hosted API management with OAuth2, OpenAPI and admin UI.
- [Vaultwarden](https://railway.com/deploy/vaultwarden-2) - Vaultwarden, an open source, self-hostable Bitwarden backend
- [Infisical HA](https://railway.com/deploy/infisical-ha) - Platform to securely manage application configuration and secrets.
- [One Time Secret](https://railway.com/deploy/one-time-secret-1) - Share sensitive information securely with self-destructing links
- [Go Auth Service](https://railway.com/deploy/go-auth-service) - Deploy and Host Go Auth Service with Railway
- [SIWE-OIDC](https://railway.com/deploy/siwe-oidc) - Sign In With Ethereum OpenID Connect Provider
- [PSWD](https://railway.com/deploy/v9JNhZ) - Password Generation Should Be Simple And Secure.
- [Zitadel](https://railway.com/deploy/Msn-6E) - Zitadel on Railway with PostgreSQL
- [StackAuth](https://railway.com/deploy/bL-6Ll) - auth0 and Clerk selfhostable alternative. robust, secured, and customizable
- [Nextjs-pocketauth](https://railway.com/deploy/ZqVg5k) - Nextjs starter with simple auth by Pocketbase 
- [bknd](https://railway.com/deploy/p4nTYL) - Feature-rich yet lightweight backend
- [Teleport](https://railway.com/deploy/teleport) - The easiest and most secure way to access and protect infrastructure.
- [authentik](https://railway.com/deploy/Vx-b8p) - A working template to spin up authentik with minimal resources.
- [Zitadel](https://railway.com/deploy/Q0uE7q) - Robust & customizable turnkey solution for authentication and authorization

Open this page in a browser: https://railway.com/deploy/category/authentication