Authentication flows

Use Auth for sign-in and sign-up flows, and to manage sessions. You can access auth with Clerk.auth.

val signIn = Clerk.auth.signInWithPassword {
    identifier = "user@email.com"
    password = "secretpassword"
}

Send an OTP to the supplied email, and then verify the code.

var signIn = Clerk.auth.signInWithOtp { email = "user@email.com" }
signIn = signIn.verifyCode("123456")

Send an OTP to the supplied phone number, and then verify the code.

var signIn = Clerk.auth.signInWithOtp { phone = "+1234567890" }
signIn = signIn.verifyCode("123456")

val result = Clerk.auth.signInWithOAuth(OAuthProvider.GOOGLE)

val result = Clerk.auth.signInWithIdToken {
    token = idToken
    provider = IdTokenProvider.GOOGLE
}

val signIn = Clerk.auth.signInWithPasskey()

val result = Clerk.auth.signInWithEnterpriseSso { email = "user@company.com" }

val signIn = Clerk.auth.signInWithTicket(ticket)

If the Backend API created the sign-in token with org_id, Clerk activates that Organization for the resulting session. After sign-in succeeds, the Organization ID is available from Clerk.session?.lastActiveOrganizationId.

Send an email link to the supplied email address. After the user opens the link, handle the callback with Clerk.auth.handle(intent.data).

Clerk.auth
    .startEmailLinkSignIn("user@email.com")
    .onSuccess {
        // Show a message that tells the user to check their email.
    }

Start a sign-in with an identifier (email, phone, or username):

// Email
var signIn = Clerk.auth.signIn { email = "user@email.com" }

// Phone
var signIn = Clerk.auth.signIn { phone = "+1234567890" }

// Username
var signIn = Clerk.auth.signIn { username = "johndoe" }

Use these methods when you already have a SignIn from Clerk.auth.signIn { ... } and want to complete it with a specific factor or provider.

Send and verify email code

Send the user an OTP via email to verify their sign-in. Then verify the code that the user supplies:

signIn = signIn.sendEmailCode()
signIn = signIn.verifyCode("123456")

Send email link

Send the user an email link to verify their sign-in. After the user opens the link, handle the callback with Clerk.auth.handle(intent.data).

signIn
    .sendEmailLink()
    .onSuccess { updatedSignIn ->
        signIn = updatedSignIn
        // Show a message that tells the user to check their email.
    }

Send and verify phone code

Send the user an OTP via SMS to verify their sign-in. Then verify the code that the user supplies:

signIn = signIn.sendPhoneCode()
signIn = signIn.verifyCode("123456")

Authenticate with password

signIn = signIn.verifyWithPassword("secretpassword")

Authenticate with passkey

signIn = signIn.verifyWithPasskey(credential)

Multi-factor authentication

After completing first factor verification, if multi-factor authentication (MFA) is required, use these methods to complete the second factor verification. The examples assume you already have a SignIn from a sign-in flow.

MFA with phone code

Send and verify an MFA code via SMS:

signIn = signIn.sendMfaPhoneCode()
signIn = signIn.verifyMfaCode("123456", MfaType.PHONE_CODE)

MFA with email code

Send and verify an MFA code via email:

signIn = signIn.sendMfaEmailCode()
signIn = signIn.verifyMfaCode("123456", MfaType.EMAIL_CODE)

MFA with TOTP (authenticator app)

Verify using a TOTP code from an authenticator app:

signIn = signIn.verifyMfaCode("123456", MfaType.TOTP)

MFA with backup code

Verify using a backup code:

signIn = signIn.verifyMfaCode("backup123", MfaType.BACKUP_CODE)

Password reset

The Clerk Android SDK provides methods to reset user passwords via email or phone verification.

Password reset with email

Reset password using email verification:

var signIn = Clerk.auth.signIn { email = "user@email.com" }
signIn = signIn.sendResetPasswordCode { email = "user@email.com" }
signIn = signIn.verifyCode("123456")
signIn = signIn.resetPassword(newPassword = "newpassword", signOutOfOtherSessions = true)

Password reset with phone

Reset password using phone verification:

var signIn = Clerk.auth.signIn { phone = "+1234567890" }
signIn = signIn.sendResetPasswordCode { phone = "+1234567890" }
signIn = signIn.verifyCode("123456")
signIn = signIn.resetPassword(newPassword = "newpassword", signOutOfOtherSessions = true)

Create a new account:

val signUp = Clerk.auth.signUp {
    email = "newuser@email.com"
    phone = "+1234567890"
    password = "secretpassword"
    firstName = "John"
    lastName = "Doe"
    username = "johndoe"
    legalAccepted = true
}

Update sign-up information:

signUp = signUp.update {
    email = "newuser@email.com"
    phone = "+1234567890"
    password = "secretpassword"
    firstName = "John"
    lastName = "Doe"
    username = "johndoe"
    legalAccepted = true
}

val result = Clerk.auth.signUpWithOAuth(OAuthProvider.GOOGLE)

val result = Clerk.auth.signUpWithIdToken(idToken, IdTokenProvider.GOOGLE) {
    firstName = "John"
    lastName = "Doe"
}

val result = Clerk.auth.signUpWithEnterpriseSso { email = "user@company.com" }

val signUp = Clerk.auth.signUpWithTicket(ticket)

Use these methods when you already have a SignUp from Clerk.auth.signUp { ... } and want to complete it with a specific factor or provider.

Send and verify email via OTP

Send the user an OTP via email to verify their account. Then verify the code that the user supplies:

signUp = signUp.sendEmailCode()
signUp = signUp.verifyCode("123456", VerificationType.EMAIL)

Send email link

Send the user an email link to verify their account. After the user opens the link, handle the callback with Clerk.auth.handle(intent.data).

signUp
    .sendEmailLink()
    .onSuccess { updatedSignUp ->
        signUp = updatedSignUp
        // Show a message that tells the user to check their email.
    }

Send and verify phone via OTP

Send the user an OTP via SMS to verify their account. Then verify the code that the user supplies:

signUp = signUp.sendPhoneCode()
signUp = signUp.verifyCode("654321", VerificationType.PHONE)

Access the in-progress sign-in or sign-up stored on the client for multi-step flows.

val currentSignIn = Clerk.auth.currentSignIn

val currentSignUp = Clerk.auth.currentSignUp

Session management

The Clerk Android SDK provides methods to manage user sessions, including signing out, switching sessions, and revoking sessions.

Sessions

Retrieve all sessions for the current client:

val sessions = Clerk.client.sessions

Get session token

Retrieve the user's session token:

val token = Clerk.auth.getToken()

// or with options
val token = Clerk.auth.getToken(GetTokenOptions(template = "my-template"))

Set current session

Set the current session and optionally the Active Organization:

Clerk.auth.setActive(sessionId = sessionId, organizationId = organizationId)

Revoke session

Revoke a specific session:

Clerk.auth.revokeSession(session)

Sign out

Sign out the current user:

// Sign out from the current session
Clerk.auth.signOut()

// Sign out from a specific session
Clerk.auth.signOut(sessionId = sessionId)

Deep linking

Handle OAuth, SSO, and email link deep link callbacks in your Activity:

// In your Activity's onCreate or onNewIntent
Clerk.auth.handle(intent.data)

Last updated on Jul 22, 2026

Edit on GitHub

Authentication flows

Feedback