Cybersecurity · head to head
Authelia vs HTTPS Everywhere

Authelia
Cybersecurity
Open-source authentication and two-factor portal for reverse proxies
- From
- Free
- Rated
- -
The short version
- Each has a real cost: Authelia depends on a reverse proxy: it is not a standalone identity provider; HTTPS Everywhere product discontinued as of January 2023
- They diverge on capability: Authelia covers Reverse proxy integration, HTTPS Everywhere covers Automatic HTTPS.
- Prices and features above were last checked on 30 August 2026.
Where they differ
Only the attributes on which Authelia and HTTPS Everywhere actually diverge.
| Attribute | Authelia | HTTPS Everywhere |
|---|---|---|
| Pricing model | Open source, no licence fee | free |
| Platforms | Docker, Kubernetes, Linux, Self-hosted | Chrome, Firefox, Edge, Opera |
| Category | Cybersecurity | Browser Extensions |
| Founded | Unknown | 1990 |
Identical on both: starting price (Free), free tier (Yes), user rating (Not yet rated).
What each one covers
Drawn from each product's published feature list. An absence here means we hold no record of it - not that the product lacks it.
Only in Authelia
- Reverse proxy integration
- Two-factor authentication
- Access control rules
- Lightweight backends
Only in HTTPS Everywhere
- Automatic HTTPS
- Encryption enforcement
- Rule-based upgrading
- Observatory integration
- Chrome support
- Firefox support
- Edge support
- Opera support
What people use each for
The jobs each tool is most often brought in to do.
Authelia
- Putting a login and 2FA in front of self-hosted services that have nonenot HTTPS Everywhere
- Adding SSO across a small set of internal tools without a full identity platformnot HTTPS Everywhere
- Home and small-team infrastructure behind a single reverse proxynot HTTPS Everywhere
HTTPS Everywhere
- Forcing encrypted HTTPS connections on websites that support itnot Authelia
- Preventing eavesdropping and content hijacking on unsecured networksnot Authelia
Where each one falls short
Documented limitations, not opinions. Every one is a constraint you would hit in normal use.
Authelia
- Depends on a reverse proxy: it is not a standalone identity provider
- Configuration is YAML-first with no administrative interface, so changes mean editing files
- Not a full IAM: user management, provisioning and federation are limited compared with Keycloak
- Scales poorly as an organisation-wide identity solution, which is not its target
HTTPS Everywhere
- Product discontinued as of January 2023
- Functionality now built into all modern browsers natively
- No longer receives security updates or maintenance
Pricing, plan by plan
Authelia
Free- AutheliaFree
- Full functionality
- No usage limits
- Community support
HTTPS Everywhere
Free- FreeFree
- Automatic HTTPS upgrade
- Rule sets
- Custom rules
Which should you pick?
Choose Authelia if
- You need reverse proxy integration.
- You want to start without paying.
- You work on Docker, Kubernetes, Linux, Self-hosted.
- You also want two-factor authentication.
Choose HTTPS Everywhere if
- You need automatic https.
- You want to start without paying.
- You work on Chrome, Firefox, Edge, Opera.
- You also want encryption enforcement.
Questions people ask
- Is Authelia or HTTPS Everywhere better?
- Neither clearly leads. Authelia starts at Free and HTTPS Everywhere at Free, and user ratings are close enough to be indistinguishable. Choose on capability and platform support.
- Which is cheaper, Authelia or HTTPS Everywhere?
- Authelia starts at Free and HTTPS Everywhere at Free.
- Does Authelia or HTTPS Everywhere run on more platforms?
- Authelia runs on Docker, Kubernetes, Linux, Self-hosted. HTTPS Everywhere runs on Chrome, Firefox, Edge, Opera.
- Can I use Authelia for free?
- Both have a free tier, so you can try either at no cost before committing.
- What is Authelia best used for?
- Authelia is most often used for putting a login and 2fa in front of self-hosted services that have none, adding sso across a small set of internal tools without a full identity platform, home and small-team infrastructure behind a single reverse proxy. Of those, putting a login and 2fa in front of self-hosted services that have none and adding sso across a small set of internal tools without a full identity platform are not what HTTPS Everywhere is typically brought in for.
- What can Authelia do that HTTPS Everywhere cannot?
- Authelia covers Reverse proxy integration, Two-factor authentication, Access control rules, Lightweight backends. HTTPS Everywhere covers Automatic HTTPS, Encryption enforcement, Rule-based upgrading, Observatory integration.
Answered from the vendors’ own pages
Authelia: Is Authelia free?
Yes, open source with no licence fee.
HTTPS Everywhere: Is HTTPS Everywhere still maintained?
No. HTTPS Everywhere was retired in January 2023 because major browsers added native HTTPS upgrade features, making the extension obsolete.
SourceAuthelia: Does Authelia need a reverse proxy?
Yes. It integrates through forward authentication with Nginx, Traefik, Caddy or HAProxy rather than sitting in front of traffic itself.
HTTPS Everywhere: What functionality did HTTPS Everywhere provide?
The extension automatically redirected HTTP connections to HTTPS when available, improving encryption and privacy on unencrypted websites.
SourceAuthelia: Authelia or Keycloak?
Authelia is far lighter and aimed at protecting self-hosted services behind a proxy. Keycloak is a full identity and access management platform, and much more to run.
HTTPS Everywhere: What is the recommended replacement?
Modern browsers including Chrome, Firefox, Edge, and Safari now include built-in HTTPS upgrade features that automatically redirect to secure connections, making HTTPS Everywhere unnecessary.
SourceRelated pages
More on HTTPS Everywhere
Other head to heads
- Authelia vs authentik
- Authelia vs Logto
- Authelia vs Ory Kratos
- Authelia vs Frontegg
- Authelia vs Infisical
- Authelia vs Bitwarden
- Authelia vs Semgrep
- Authelia vs Trivy
- Authelia vs Chainguard
- Authelia vs Passbolt
- Authelia vs 1Password
- Authelia vs Signicat
- Authelia vs Silent Eight
- Authelia vs Socket
- Authelia vs Socure
- Authelia vs SonicWall
- Authelia vs Sophos Intercept X
- Authelia vs Ory
- Authelia vs Dark Reader
- Authelia vs Pocket
- Authelia vs Raindrop.io
- Authelia vs BuiltWith
- Authelia vs Capital One Shopping
- Authelia vs Ghostery
- Authelia vs Honey
- Authelia vs GoFullPage
- Authelia vs Wappalyzer
- Authelia vs AdBlock Plus
- Authelia vs Evernote Web Clipper
- Authelia vs Instapaper
- Authelia vs Save to Google Drive
- Authelia vs Tampermonkey
- Authelia vs Vimeo Record
- Authelia vs Vue.js Devtools
- Authelia vs Web Developer
- Authelia vs Arc
- HTTPS Everywhere vs authentik
- HTTPS Everywhere vs Logto
- HTTPS Everywhere vs Ory Kratos
- HTTPS Everywhere vs Frontegg
- HTTPS Everywhere vs Infisical
- HTTPS Everywhere vs Bitwarden
- HTTPS Everywhere vs Semgrep
- HTTPS Everywhere vs Trivy
- HTTPS Everywhere vs Chainguard
- HTTPS Everywhere vs Passbolt
- HTTPS Everywhere vs 1Password
- HTTPS Everywhere vs Signicat
- HTTPS Everywhere vs Silent Eight
- HTTPS Everywhere vs Socket
- HTTPS Everywhere vs Socure
- HTTPS Everywhere vs SonicWall
- HTTPS Everywhere vs Sophos Intercept X
- HTTPS Everywhere vs Ory
- HTTPS Everywhere vs Dark Reader
- HTTPS Everywhere vs Pocket
- HTTPS Everywhere vs Raindrop.io
- HTTPS Everywhere vs BuiltWith
- HTTPS Everywhere vs Capital One Shopping
- HTTPS Everywhere vs Ghostery
- HTTPS Everywhere vs Honey
- HTTPS Everywhere vs GoFullPage
- HTTPS Everywhere vs Wappalyzer
- HTTPS Everywhere vs AdBlock Plus
- HTTPS Everywhere vs Evernote Web Clipper
- HTTPS Everywhere vs Instapaper
- HTTPS Everywhere vs Save to Google Drive
- HTTPS Everywhere vs Tampermonkey
- HTTPS Everywhere vs Vimeo Record
- HTTPS Everywhere vs Vue.js Devtools
- HTTPS Everywhere vs Web Developer
- HTTPS Everywhere vs Arc

