Cloud-hosted RADIUS infrastructure

RADIUS
authentication
as a service.

Manage WiFi WPA Enterprise, VPN, and ISP users from one unified portal. Multi-tenant, REST API, real-time accounting. Zero servers to maintain.

Start free — 14 days Read the docs

No credit card required

Live in under 5 minutes

99.9% uptime SLA

Multi-tenant architecture

📡

WiFi AP
MikroTik / UniFi

🔒

VPN
OpenVPN / IPsec

🌐

ISP
PPPoE / BRAS

RADIUS Port 1812 / 1813

radauth.net

FreeRADIUS · Multi-tenant · HA

Corp A

120 users

Hotel B

85 users

ISP C

3,200 users

Every tenant fully isolated — zero data leakage

99.9%

Uptime SLA

<50ms

Auth latency

Use cases

One RADIUS server for
every type of network

From enterprise WiFi to ISPs handling thousands of PPPoE sessions. radauth.net adapts to any network infrastructure.

Enterprise WiFi — WPA2/WPA3 Enterprise

Every employee connects with their own credentials — no shared PSK to rotate when someone leaves. Full audit trail of who connected, from where, and when.

✓ PEAP-MSCHAPv2 (Windows, macOS, Android, iOS)
✓ RADIUS groups for per-department policies
✓ Account expiry and time-based access control
✓ EAP certificate included, SHA-256 fingerprint exportable

Works with: Ubiquiti UniFi · MikroTik · Cisco · Aruba · Ruckus

Hotspot & Captive Portal

For hotels, cafés, campuses, and public spaces. The Always Accept plan lets any device through without a user database — perfect for open guest networks or voucher-based access.

✓ Always Accept mode — no credential validation
✓ Session time and bandwidth limits via RADIUS attributes
✓ Accounting records per MAC / user for usage reporting
✓ Compatible with pfSense, OPNsense, Coova-Chilli

Works with: MikroTik Hotspot · pfSense · OPNsense · Coova-Chilli

ISP & WISP — PPPoE RADIUS

Authenticate PPPoE subscribers directly against radauth.net. Manage service plans, speed policies with MikroTik Rate-Limit attributes, and auto-suspend on non-payment.

✓ Mikrotik-Rate-Limit for per-plan QoS
✓ RADIUS groups for Basic / Standard / Premium tiers
✓ Session reports with GB transferred per subscriber
✓ REST API to integrate with your billing platform

Works with: MikroTik BRAS · EdgeRouter · Cisco BNG · Huawei MA

Centralized VPN Authentication

One user, one login — the same credentials work on WiFi and VPN. Unified accounting across all network access points for a single audit trail.

✓ OpenVPN with RADIUS plugin
✓ pfSense L2TP/IKEv2 + RADIUS
✓ Cisco ASA / Fortinet SSL-VPN
✓ MFA-ready via RADIUS reply attributes

Works with: OpenVPN · pfSense · Cisco ASA · Fortinet · Palo Alto

Process

Up and running in under 5 minutes

Nothing to install. No servers to manage. Just configure and authenticate.

Create your account

Register your NAS devices

Add the IP address and shared secret of each AP, switch, or router. The RADIUS server recognizes them instantly.

Manage your users

Create users, assign groups, set expiry dates and bandwidth limits. Monitor live sessions and export accounting reports.

radauth API — create a user in seconds

# Create a RADIUS user via REST API

$ curl -X POST https://app.radauth.net/api/v1/users \

-H "Authorization: Bearer ra_xxxxxxxxxxxx" \

-d '{"username":"john.doe","password":"S3cur3Pass!","group":"staff"}'

{

"id": 142,

"username": "john.doe",

"group": "staff",

"status": "active",

"created_at": "2026-06-16T10:23:45Z"

}

Features

Everything you need. Nothing you don't.

Strict multi-tenancy

Every customer has their own users, NAS devices, and reports. Isolated by NAS IP — zero data leakage between tenants.

Full REST API

Create, update, and delete users via API. Per-tenant Bearer token. Integrate with your billing system, CRM, or LDAP sync.

Accounting & reports

Full session history per user: start time, duration, bytes in/out, and originating NAS. CSV export included.

Always Accept mode

Accept any credential without validation. Ideal for open hotspots, events, and guest networks — with accounting still active.

WPA Enterprise / 802.1X

PEAP-MSCHAPv2 with included EAP certificate. Per-device setup guides for Windows, macOS, Android, and iOS.

Integrated billing

Monthly or annual subscriptions via card. Self-service customer portal for plan changes and invoices. Powered by Stripe.

Groups & policies

Assign users to groups with custom RADIUS attributes. Control bandwidth, session duration, and time-of-day access per group.

Realm / multi-domain

Supports user suffix routing (user@org.com) to identify the tenant without changing AP config.

API keys per tenant

Generate multiple access tokens for automation. Revoke individually without affecting other integrations.

Integrations

Works with the gear you already have

Compatible with any device that speaks standard RADIUS (RFC 2865/2866).

MikroTik RouterOS

Ubiquiti UniFi

Cisco IOS / ASA

pfSense / OPNsense

OpenWRT

Fortinet FortiGate

Aruba (HPE)

Ruckus / CommScope

OpenVPN

Palo Alto Networks

Coova-Chilli

Windows NPS (proxy)

Not on the list? If it speaks standard RADIUS, it works with radauth.net.

Customer stories

What our customers say

"We were running bare-metal FreeRADIUS servers that ate up engineering time and caused anxiety every patch cycle. We migrated 800 PPPoE subscribers to radauth.net in an afternoon and gained session visibility we never had before."

Daniel Kim

CTO — Horizon WISP, Texas

"We manage 8 hotel properties, each with their own corporate and guest networks. radauth.net lets us run each property as an isolated tenant under one dashboard. The real-time session reports caught two bandwidth abusers in the first week."

Sarah Reynolds

IT Director — Meridian Hotels Group, UK

"We rolled out WPA Enterprise for 3,500 students using credentials from our student information system via the API. The whole integration took one day. Support responded in under 2 hours. You can't do that with on-prem RADIUS."

Marcus Thompson

Network Engineer — Lakewood College, Canada

Pricing

Simple pricing. No surprises.

All plans include a 14-day free trial. No credit card required.

Starter

$9.99 /mo

billed annually ($99.90/yr)

Great for small networks and side projects.

100 RADIUS users
3 NAS devices
5 groups
REST API + reports
WPA Enterprise

Start free trial

Everything you need to know

Every RADIUS request arrives with the NAS source IP. We use that IP to identify the tenant and scope all SQL queries to that tenant's tenant_id. It is architecturally impossible for a user belonging to one customer to authenticate against another customer's database, even though they share the same RADIUS server.

Yes. PPPoE uses RADIUS to authenticate subscribers and push session attributes (speed, assigned IP, session time). You can add RADIUS attributes in user groups, including Mikrotik-Rate-Limit for per-plan bandwidth shaping. The Enterprise plan handles up to 5,000 active users; contact sales for higher volumes.

WPA3 Enterprise uses the same EAP methods as WPA2 Enterprise (PEAP, EAP-TLS, etc.) — the underlying RADIUS protocol is unchanged. radauth.net is fully compatible with WPA3 Enterprise as long as your AP supports it. Our FreeRADIUS server supports TLS 1.3 and the cipher suites required for WPA3-Enterprise 192-bit mode.

We send you an email reminder before the 14-day trial expires. If you haven't added a payment method, your account is suspended (your data is kept for 30 days). You can reactivate at any time by subscribing. Nothing is charged automatically without your explicit confirmation.

Yes. The REST API lets you create, update, and delete users, groups, and NAS devices using Bearer token authentication. It's designed to integrate with billing platforms, CRMs, school information systems, or any custom backend. See the full API reference.

Our base infrastructure runs with a primary node in South America and a replica in North America. Standard SLA is 99.9% monthly uptime. The Unlimited plan offers dedicated instances with a custom SLA of up to 99.99%.

RADIUS authentication as a service.

One RADIUS server forevery type of network