CrydenSync is an embeddable authentication engine that gives developers a standard, reusable auth system they control.

Think of it as: import "github.com/crydensync/cryden/v2" → production-ready auth in minutes.

No vendor lock-in. No cloud dependency. Your users belong to YOU.

🇳🇬 🇰🇪 🇿🇦 🇬🇭 🇪🇬 🇹🇿 🇺🇬 🇸🇳 🇷🇼 🇳🇦 🇿🇲 🇨🇲 🇪🇹 🇲🇦 🇩🇿

African developers are our priority.
Offline-first storage is on the roadmap — see below.
Affordable to run, self-hosted, no forced cloud dependency.
Your data, your rules, your continent.

Why v2, not v1? The original v1 had real, since-fixed security issues (predictable session IDs, a hardcoded default JWT secret, broken rate limiting). v2 is a ground-up rewrite that fixes these at the architecture level — see the design decisions doc for the full story.

👑 Own Your Users Your users belong to you, not us. User data stays in your own Postgres database, self-hosted, from the first line of code.

🔌 Framework Agnostic No HTTP, no cookies, no headers baked in. Pure logic you can wrap with a CLI, an HTTP API, or embed directly in your Go app.

🕵️ Zero Telemetry The engine never phones home. Logs, audit events, and email delivery all go wherever you configure — nothing leaves your infrastructure by default.

🌍 African-First, Global-Ready Built with real-world constraints in mind (unstable connectivity, affordable infrastructure) — self-hosting anywhere, including on modest hardware, is a first-class use case, not an afterthought. True offline-first local storage (e.g. SQLite) is a real, planned roadmap item, not shipped yet.

import (
	"context"

	"github.com/crydensync/cryden/v2"
	"github.com/crydensync/cryden/v2/store/postgres"
)

func main() {
	db, _ := sql.Open("postgres", os.Getenv("DATABASE_URL"))

	engine, _ := cryden.New(cryden.Config{
		JWTSecret: os.Getenv("JWT_SECRET"),
		Users:     postgres.NewUserStore(db),
		Sessions:  postgres.NewSessionStore(db),
		Audit:     postgres.NewAuditStore(db),
	})
	ctx := context.Background()

	// Sign up
	user, _ := cryden.SignUp(ctx, engine, "devray@example.com", "Pass@2026", callerIP)

	// Login
	tokens, _ := cryden.Login(ctx, engine, "devray@example.com", "Pass@2026", callerIP, userAgent)

	// Protect routes
	userID, _ := cryden.VerifyToken(engine, tokens.AccessToken)
}

No database yet? Swap in store/memory for a zero-setup version to try it out.

📚 Get Started →

A hosted, multi-tenant CrydenSync Cloud is explicitly not on the current roadmap — every deployment is self-hosted, by design.

1. Read CONTRIBUTING.md
2. Check open issues
3. Join the WhatsApp group or Discord
4. Introduce yourself

Look for issues labeled good-first-issue, help-wanted, or documentation. We'll help you land your first PR.

African developers: WhatsApp is our primary home.

• Just want updates? → Join the Channel
• Want to ask questions? → Join the Group
• Want voice calls? → Discord
• Want to contribute code? → GitHub Discussions

Direct: Ask on WhatsApp

Built in Nigeria. For African developers. Welcoming the world.

All CrydenSync projects are open source under the MIT License.

Free forever. Open always. Own your users.