Compare
Firebase Auth is Google's developer-friendly authentication service — generous on its free basic tier and backed by mature client SDKs. Choose Qeet ID when you need built-in authorization, enterprise SSO without a pricing gate, a dedicated admin UI, and open-source self-hosting.
Qeet ID
- License
- MIT (open source)
- Self-host
- First-class
- Pricing
- Linear per-MAU
- Stack
- Go + Postgres
- Data residency
- EU / US / self
Firebase Auth
- License
- Proprietary (Google)
- Self-host
- Not available
- Pricing
- Free basic / GCIP per-MAU
- Stack
- Managed (Google Cloud)
- Data residency
- Google Cloud regions
More than a login box bolted to a database.
Firebase Auth is fast to start and free at the basic tier. Qeet ID matches its auth methods and adds the parts you would otherwise build yourself — RBAC / ABAC, enterprise SSO, an admin UI, and a verifiable audit trail.
Feature-by-feature
Verified against Qeet ID's implemented status and Firebase Auth's public docs. Where we're still building, we say so.
- Available
- Partial / gated
- Not offered
| Capability | Qeet ID | Firebase Auth |
|---|---|---|
| Authentication | ||
Passkeys / WebAuthn Firebase added passkey support recently. | Yes | Yes |
Magic links Firebase calls these email-link sign-in. | Yes | Yes |
MFA (TOTP, SMS) | Yes | Yes |
| Federation | ||
Social / OIDC consumer login | Yes | Yes |
SAML 2.0 / OIDC enterprise SSO Requires Identity Platform (GCIP) Tier 2 — free ≤50 MAU, then $0.015/MAU. | Yes | Partial |
SCIM 2.0 provisioning Firebase / GCIP is not a SCIM provisioning IdP. | Yes | No |
| Authorization | ||
RBAC + single-call /check API No built-in RBAC; you roll your own with custom claims + Security Rules. | Yes | No |
ABAC policy engine Attribute logic lives in Firestore Security Rules, not a dedicated policy engine. | Yes | Partial |
Explainable authz (grant-path “why?” trace) | Yes | No |
Multi-tenant isolation by default GCIP supports tenants; base Firebase Auth does not. | Yes | Partial |
| Deployment | ||
Open-source code (MIT) Firebase client SDKs are open; the auth service is not. | Yes | No |
Self-host (single binary + Postgres) Firebase is Google-cloud-only; there is no self-host. | Yes | No |
Air-gapped / fully offline | Yes | No |
| Pricing | ||
Free tier Base Firebase Auth is free (only phone / SMS is billed); Identity Platform is priced per-MAU. | 25,000 MAU | Unlimited (basic) |
Per-MAU pricing GCIP is tier-stepped and declines with volume. | $0.02 / MAU (Pro) | From $0.0055 / MAU (GCIP) |
Enterprise SSO included SAML / OIDC SSO sits in GCIP's higher-priced Tier 2. | Yes | No |
| Security & audit | ||
Tamper-evident hash-chained audit log + /verify Firebase events reach Cloud Audit Logs but are not hash-chained or verifiable. | Yes | Partial |
Breached-password rejection (HIBP) Not built in; base Firebase Auth does not check passwords against a breach corpus. | Yes | No |
Adaptive / risk-based MFA + bot detection Firebase leans on reCAPTCHA / App Check; Qeet ID's adaptive MFA is planned. | Roadmap | Partial |
| Compliance | ||
SOC 2 Type II / ISO 27001 Google Cloud carries broad compliance attestations. | Roadmap (pre-GA) | Yes |
Self-hosted = your compliance boundary | Yes | No |
| Developer experience | ||
Native admin dashboard Firebase console is developer-centric; no dedicated end-user identity admin. | Yes | Partial |
Webhook events with HMAC + retries Firebase uses Cloud Functions triggers rather than signed HTTP webhooks. | Yes | Partial |
First-party SDKs Firebase's client SDKs are a genuine strength. | React · Node · Go | Mature, broad client SDKs |
Comparison is based on publicly-available product information at the time of writing. We do our best to be accurate — if anything above is wrong, please let us know and we'll correct it.
Migrate from Firebase Auth
Keep the fast start. Add the enterprise parts.
Start free on our hosted plan, or self-host the Qeet ID binary — with RBAC, SSO, and audit built in from day one.