kratos

<h1 align="center">
  <img src="https://raw.githubusercontent.com/ory/meta/master/static/banners/kratos.svg" alt="Ory Kratos - Cloud native identity and user management">
</h1>

<h4 align="center">
  <a href="https://www.ory.com/chat">Chat</a> ·
  <a href="https://github.com/ory/kratos/discussions">Discussions</a> ·
  <a href="https://www.ory.com/l/sign-up-newsletter">Newsletter</a> ·
  <a href="https://www.ory.com/docs/">Docs</a> ·
  <a href="https://console.ory.sh/">Try Ory Network</a> ·
  <a href="https://www.ory.com/jobs/">Jobs</a>
</h4>

Ory Kratos is an API first identity and user management system for cloud native
applications. It centralizes login, registration, recovery, verification, and
profile management flows so your services consume them instead of reimplementing
them.

<!-- START doctoc generated TOC please keep comment here to allow auto update -->
<!-- DON'T EDIT THIS SECTION, INSTEAD RE-RUN doctoc TO UPDATE -->

**Table of contents**

- [What is Ory Kratos?](#what-is-ory-kratos)
  - [Why Ory Kratos](#why-ory-kratos)
- [Migrating from Auth0, Okta, and similar providers](#migrating-from-auth0-okta-and-similar-providers)
- [Deployment options](#deployment-options)
  - [Use Ory Kratos on the Ory Network](#use-ory-kratos-on-the-ory-network)
  - [Self-host Ory Kratos](#self-host-ory-kratos)
- [Quickstart](#quickstart)
  - [Who is using it?](#who-is-using-it)

<!-- END doctoc generated TOC please keep comment here to allow auto update -->

## What is Ory Kratos?

Ory Kratos is an API first identity and user management system that follows
[cloud architecture best practices](https://www.ory.com/docs/ecosystem/software-architecture-philosophy).
It focuses on core identity workflows that almost every application needs:

- Self service login and registration
- Account verification and recovery
- Multi factor authentication
- Profile and account management
- Identity schemas and traits
- Admin APIs for lifecycle management

We recommend starting with the
[Ory Kratos introduction docs](https://www.ory.com/kratos/docs/) to learn more
about its architecture, feature set, and how it compares to other systems.

### Why Ory Kratos

Ory Kratos is designed to:

- Remove identity logic from your application code and expose it over HTTP APIs
- Work well with any UI framework through browser based and native app flows
- Scale to large numbers of identities and devices
- Integrate with the rest of the Ory stack for OAuth2, OpenID Connect, and
  access control
- Fit into modern cloud native environments such as Kubernetes and managed
  platforms

## Migrating from Auth0, Okta, and similar providers

If you are migrating from Auth0, Okta, or another identity provider that uses
OAuth2 / OpenID Connect based login, consider using **Ory Hydra + Ory Kratos**
together:

- **Ory Hydra** acts as the OAuth2 and OpenID Connect provider and can replace
  most authorization server and token issuing capabilities of your existing IdP.
- **Ory Kratos** provides identit