OSS TanbouOn this page
Overview
Devise is an authentication solution for Rails built on Warden. Modules such as DatabaseAuthenticatable, Confirmable, Recoverable, Registerable, and Lockable can be combined on application models to provide sessions, password resets, registration, confirmation, and related account workflows.
Features and best fit
Based on official documentation; not hands-on tested · Content checked:
Key features
Compose authentication behavior from model-level modules
Password authentication, registration, confirmation, password recovery, remember cookies, session timeout, and account locking are exposed as modules that applications can enable as needed.
Sources: [1]
Integrate authentication through Rails engines, routes, and controller helpers
Generators add initializer and model/route configuration, while helpers such as authenticate_user! and current_user expose authentication state to Rails controllers and views.
Sources: [1]
Support multiple models, OmniAuth, and different ORM configurations
Devise supports multiple authentication scopes, OmniAuth integration, and configurations for ActiveRecord and Mongoid so the authentication layer can follow the Rails application's architecture.
Sources: [1]
Best fit
Fits Rails applications that need standard account authentication workflows quickly
It is useful when teams want mature Rails integration for sign-in, registration, password reset, and confirmation without rebuilding those flows from scratch.
Sources: [1]
Before adoption
Devise 5 targets Rails 7+ and Ruby 2.7+
The README positions Devise 5 for Rails 7 and newer, while the v5.0.4 gemspec requires Ruby >= 2.7.0 and railties >= 7.0.
Official sources
- [1]Devise v5.0.4 README(2026-10-04)
- [2]Devise v5.0.4 release(2026-10-04)
- [3]Devise v5.0.4 gemspec(2026-10-04)
- [4]Devise v5.0.4 changelog(2026-10-04)
- [5]Devise MIT license(2026-10-04)
Supplemental curator note
Devise provides authentication building blocks, but application-specific authorization, account lifecycle, and CSRF/session policies still require separate design.
Try it in 3 steps
- 1
Add Devise 5.0.4 to an existing Rails application
Pin the security-fixed 5.0.4 release in a Rails 7+ application.
cd your-rails-app && bundle add devise --version 5.0.4 - 2
Generate the Devise initializer
Generate the authentication initializer and review environment requirements such as mailer URL settings.
cd your-rails-app && bundle exec rails generate devise:install - 3
Generate Devise configuration for a User model
Generate model, route, and migration changes. Review the migration and enabled modules before applying database changes.
cd your-rails-app && bundle exec rails generate devise User
Growth
Growth trends · Last 30 days
24,354 Stars
Trend data is still being collected.
Built with
Categories and tags
Categories
GitHub data
GitHub dataView detailed GitHub data
GitHub Topics
- authentication
- devise
- rails
- ruby
Related information
Write a related articleShare a guide or use case for this OSS in Markdown. Articles are published after administrator approval.
Explore next
- Vaultwarden68,476 Stars
1 shared tag(s) · 1 shared category(s)
operate a Bitwarden-client-compatible API and web vault as a lightweight self-hosted server
Rust - Keycloak37,112 Stars
1 shared tag(s) · 1 shared category(s)
an IAM server providing authentication and authorization to applications
Java - HashiCorp Vault36,336 Stars
1 shared tag(s) · 1 shared category(s)
manage secret storage, issuance, encryption, leases, and revocation under one policy model
Go - JumpServer31,708 Stars
1 shared tag(s) · 1 shared category(s)
centralize privileged access to SSH, RDP, Kubernetes, and databases in one PAM platform
Python - CanCanCan5,681 Stars
2 shared tag(s) · 2 shared category(s) · Same language
centralize Rails authorization rules in Ability objects and reuse the same access policy across controllers, views, and queries
Ruby - Auth.js28,368 Stars
2 shared tag(s) · 2 shared category(s)
Compose OAuth/OIDC, passwordless, WebAuthn, and stateless or database-backed sessions from packages built around standard Web APIs
TypeScript
Report incorrect information
Tell us if any listing information is incorrect or outdated.