Amazon Cognito vs. Authenticator App by 2Stable

Well Suited

1. B2C mobile and web apps with a high number of users.
2. Cheaper and cost-effective.
3. If the other pieces of the infra are already using AWS services like Lambda, S3, Pinpoint, etc.

Not Suited For:

1. Advanced use-cases (Biometrics based authentication) Email, and other MFA channels.
2. For any use-cases needing SCIM.
3. Customized flows of SSO, and MFA will need a layer on Lambda and other AWS services.

Incentivized

Users feel safer knowing that even if someone gets the password, but they can't access the accounts without the code on phone, and sometimes if no networks also with dynamically changing pin it also helps to sign in to the account without issues. Push notification also would be a great design so users can easily access it.

Incentivized

• Strong integration with React.js and client-side applications
• Easy to bridge Cognito identities with the rest of the AWS ecosystem
• Easy to store user profile data directly in Cognito rather than having to build additional services/endpoints
• Easy integration with AWS Lambda to extend and add sophistication to the service

Incentivized

• Fast and Convenient Two-Factor Authentication
• Supports Multiple Accounts and Easy Management
• Works offline great for traveling or spotty signal areas

Incentivized

• SCIM implementation is not present.
• B2B SaaS use-cases are very hard to configure. More suitable or B2C use-cases.
• Needs more recipes, plugins, SDK's.
• 2FA with Email as an OTP channel is not supported.
• 2 FA using biometrics is not available; can be customised using lambda.

Incentivized

• While changing phones some times all accounts will gone
• Need improvement on UI and notification
• Sometimes APP biometrics are not responding quickly

Incentivized

Amazon Cognito is easy to use and implement if you don't need to implement custom policies. But if your security team requires something outside the box, then implementation becomes complicated and you risk wasting time. There is no option for customizable regex for passwords, which is a major deficiency. The standard password policy, allow to choose the length of the password, if it should contains at least one number, one special character, one uppercase letter and one lowercase letter.

Incentivized

The app makes it pretty straightforward to add accounts by scanning QR codes or entering setup keys manually. Even if you’re not super tech-savvy, the initial setup is usually smooth. Once set up, I can quickly open the app and get the 2FA codes I need without any delays or complications. The codes refresh automatically and are easy to copy over.

Incentivized

Community support is excellent, many times even better and quicker then the offical AWS support. I really cannot recommend community support enough! Apart from that the service is relativily easy to use and does not have a huge learning curve. Examples are easy to follow and will help you start using the service.

Incentivized

They are ideal tools to create a secure and unique login experience for our applications. Thanks to its API authorization, Amazon Cognito ensures connections to applications that are secure.It is easy to use and provides easy access to files and applications that you need to complete your goal.

Incentivized

Free and simple to use, no extra gadgets needed.


Quick codes generate instantly, and I don’t need a signal or internet.


Secure enough, much safer than SMS, and I’m in control since the codes live only on my device.


Supports tons of accounts I can manage my bank, work tools, social media, and more all in one place.


Overall, it felt like the best mix of convenience, security, and cost. Plus, it just works no fuss, no extra gear, just me and my phone.

Incentivized

• Amazon Cognito has had a positive impact on our business by allowing us to develop services that require user sign-up and sign-in more rapidly. Not only do we not need to build or maintain these features, but Cognito's implementation is also better than what we would be justified in building ourselves.
• Amazon Cognito makes user management easy. This reduces the time we have to spend supporting users. Non-technical product managers can even use the AWS Console to manage users without requiring support from developers.
• Amazon Cognito is likely more secure than what would be built in-house; a portion of our attack surface is now managed by Amazon.

Incentivized

• It will reduce risk of data leaks
• Remote worker it will helps to login without issues
• Providing access to Business tool from anywhere

Incentivized