Cavos, Privy, Dynamic, Turnkey, and Magic are the five Web3Auth alternatives compared here for an embedded wallet. They are also Web3Auth competitors and MetaMask Embedded Wallet alternatives. MetaMask Embedded Wallets is the current name for Web3Auth after the 2025 Consensys acquisition.
The sections below use the same facts as the compare pages. Cavos publishes its own fees on the pricing page; other vendors set theirs independently. The one-to-one write-up is Cavos vs Web3Auth. Replacement shortlists also exist for Privy, Turnkey, Dynamic, Magic, Para, and Dfns. Migration is a project, not a config change: wallet addresses are derived differently, so accounts do not transfer automatically.
Cavos, Privy, Dynamic, Turnkey, and Magic are the five Web3Auth alternatives compared here. They are also the Web3Auth competitors and the usual MetaMask Embedded Wallet alternatives. Consensys acquired Web3Auth in 2025 and now ships it as MetaMask Embedded Wallets. This page is the shortlist. The one-to-one is Cavos vs Web3Auth.
Cavos fits Starknet, Solana, or Stellar with a device-native key: hardware-isolated, non-custodial, passkey or Nitro Enclave sealed restore, keys never leaving the device in plaintext. Privy is the more mature finished SDK across EVM. Dynamic fits connecting wallets users already hold. Turnkey is signing infrastructure. Magic fits email-first EVM onboarding. Web3Auth / MetaMask Embedded Wallets remains a strong pick for broad social-login chain coverage and a key you can export.
Web3Auth / MetaMask Embedded Wallets is not the weaker product. It covers ground several of these alternatives do not, especially broad social-login chain coverage and key export. Teams still shortlist replacements when they want a device-native key, or when the chain is Starknet, Solana, or Stellar with a native account model.
Web3Auth / MetaMask Embedded Wallets splits key shares across the user’s device, the provider’s network, and recovery factors. Signing reconstructs or jointly computes a signature from those shares. Some reviews require a device-native key that the vendor cannot help produce a signature with. That is a different architecture, not a smaller feature set.
MetaMask’s product page states that Embedded Wallets use MPC with threshold signatures and Shamir’s Secret Sharing, and that export is part of the model. Cavos restores the MasterDEK on a new device. It does not advertise a seed or private-key export.
MetaMask Embedded Wallets lists native support for EVM and Solana, plus additional networks including Bitcoin and StarkNet. Feature parity still varies by chain. Teams that want each chain’s native account model on Starknet, Solana, and Stellar, rather than a social-login wallet layer, look past that breadth.
Web3Auth / MetaMask Embedded Wallets starts free at 1,000 monthly active wallets. Growth is $69/mo. Scale is $399/mo. Cavos is free up to 1,000 wallets, then Essential at $59/mo and Complete at $139/mo. Consensys acquired Web3Auth in 2025 and now ships it as MetaMask Embedded Wallets. Acquisition is a vendor-risk input. It does not change who can produce a signature.
The category has consolidated. Stripe acquired Privy in 2025. Fireblocks acquired Dynamic in 2025. Consensys acquired Web3Auth in 2025 and now ships it as MetaMask Embedded Wallets. In 2026 Payward, the parent of Kraken, acquired Magic Labs wallet infrastructure.
Cavos, Privy, Dynamic, Turnkey, Web3Auth / MetaMask Embedded Wallets, and Magic all ship an embedded wallet. They do not share a key model, the same native chain coverage, or the same pricing. Each name opens the full comparison except Cavos, which links to published fees.
| Provider | Pricing and free tier | Chains | Key model |
|---|---|---|---|
| Cavos | Free up to 1,000 wallets. Essential $59/mo. Complete $139/mo. | Starknet, Solana, and Stellar. | Device-native. One stark key from MasterDEK and app salt. No MPC. Starknet uses an audited OpenZeppelin AccountUpgradeable v3.0.0. |
| Privy | Free (0–499 MAU) with 50K signatures and $1M volume/mo. Core $299/mo. Scale $499/mo. | Broad EVM support plus Solana; coverage and feature parity vary by chain. | User wallets: 2-of-2 Shamir shares reconstituted only in AWS Nitro Enclaves (enclave share + auth share). Key export is supported. Optional custodial wallets via Bridge. |
| Dynamic | $249/mo for up to 5,000 MAUs. Then $0.05 per extra MAU. Sandbox is free. | Multi-chain, with EVM breadth and additional non-EVM support; parity varies by chain. | Embedded wallet keys managed by the provider’s key infrastructure with configurable custody models. |
| Turnkey | Pay as you go: 1,000 wallets and 25 free signatures/mo, then $0.10/signature. Pro $99/mo. | Broad cryptographic curve and chain support at the signing primitive level. | In hardware-backed secure enclaves operated as infrastructure. |
| Web3Auth / MetaMask Embedded Wallets | Free 1,000 monthly active wallets. Growth $69/mo. Scale $399/mo. | Broad multi-chain coverage. | MPC / threshold shares combined to reconstruct a private key. |
| Magic | Free 1,000 monthly active wallets and 50K signatures. $99/mo includes 2,500 MAWs. | EVM-focused with additional chain support. | Delegated key management backed by hardware security modules operated by the provider. |
| Alchemy Account Kit | Free 30M compute units/mo. PAYG $0.525 per million CUs. Gas Manager: 8% admin fee on PAYG; free on testnets. | Many EVM networks plus Solana. Bundler, ERC-20 gas payments, and Bundler Sponsored Operations are documented for those EVM networks, not for Solana. | Bring-your-own signer. Wallet APIs leave login and keys to Privy (recommended), Turnkey, Openfort, or a viem-compatible signer. |
Cavos fees are from this site. Other fees are from each vendor's public pricing page as of October 2026 and can change.
Cavos is a Web3Auth alternative, and a MetaMask Embedded Wallets alternative, when the security review requires a device-native key. The wallet is embedded in the application. Signing authority is a non-exportable device key: keys never leave the device in plaintext, signing happens on the device, and Cavos holds no key that can move user funds. Cavos does not reconstruct a master key with MPC and cannot decrypt the MasterDEK. Recovery is a synced passkey or opt-in hardware-isolated restore in an AWS Nitro Enclave.
One SDK ships chain-native adapters for those three networks. On Starknet each wallet is an audited OpenZeppelin account contract (AccountUpgradeable v3.0.0) controlled by one stark key derived from the MasterDEK and app salt. Solana uses a native Ed25519 system account. Stellar uses a classic G-account. Recovery is off-chain: a new device restores the MasterDEK with a passkey or an opt-in hardware-isolated enclave. There is no on-chain device-signer list and no on-chain social recovery.
Cavos is not a drop-in for Web3Auth. MetaMask Embedded Wallets is stronger for very broad social-login chain coverage and a key you can export. Cavos is Starknet, Solana, and Stellar with native adapters and Gas Sponsorship in Any Token (USDC is one example). The published free tier covers the first 1,000 wallet creates; Essential is $59/mo and Complete is $139/mo.
Embedded Starknet wallet, Embedded Solana wallet, Embedded Stellar wallet, How to Add an Embedded Wallet to a React App, Embedded Wallet API (2026): Auth, Sign, Gas, Non-Custodial Embedded Wallets: What They Are (2026), Best Embedded Wallet Providers 2026: Compared, Wallet as a Service (2026): Providers, Pricing, and Embedded Wallet Cost (2026): Privy, Dynamic.
Privy is a widely adopted embedded wallet and authentication provider focused primarily on EVM chains, offering both embedded wallets and external wallet connection.
Privy manages embedded wallet keys through its key-management infrastructure, with configurable self-custody and recovery options. Chain coverage is broad EVM plus Solana. Gas sponsorship is available through paymaster and bundler integrations, typically on EVM smart accounts. Connecting existing extensions is a core capability Cavos does not offer.
Choose Privy when the product is EVM-first, when you want a single vendor for embedded wallets and WalletConnect or injected wallets, or when you need the largest available ecosystem of integrations. Stripe acquired Privy in 2025. The public Developer free tier is 0–499 MAU with 50K signatures and $1M volume per month; Core is $299/mo and Scale is $499/mo.
Dynamic provides wallet connection, embedded wallets, and authentication tooling with a strong emphasis on multi-wallet login experiences and developer-facing configuration. Connecting existing external wallets is a core capability. Cavos provisions the wallet rather than connecting to one the user already holds. The two models can coexist in one product.
Embedded wallet keys are managed by the provider’s key infrastructure with configurable custody models. Dynamic’s public pricing page lists TSS-MPC key management as a plan feature. Chain coverage is multi-chain, with EVM breadth and additional non-EVM support; parity varies by chain. Gas sponsorship is supported through account abstraction and paymaster integrations, mainly on EVM.
Fireblocks acquired Dynamic in 2025. That is a vendor-risk and custody-stack input, not a reason to treat the products as interchangeable. Dynamic’s public Growth plan is $249/mo for up to 5,000 monthly active users, then $0.05 per extra MAU. A sandbox is available for integration testing before live mode.
Embedded Wallet vs Browser Extension: Where to Sign, and Dynamic alternatives.
Privy vs Turnkey is usually a layer question, not a feature checklist. Privy is a finished embedded wallet and authentication product. Turnkey is secure key-management infrastructure running in hardware-backed secure enclaves, exposed as a low-level API for building wallets and signing systems. You assemble the wallet experience on top of policy-driven signing primitives.
Keys live in remote enclaves, not on the end user’s device. Server-side signing, organizational policy, quorums, and approval workflows are the point of that design. Chain coverage is broad at the cryptographic-curve and signing-primitive level. Recovery is something you design on top of those primitives.
Choose Turnkey when you are building your own wallet or custody product. Choose a finished SDK when you want login, recovery, and sponsorship already wired. Turnkey’s public Pay as you go tier includes 1,000 wallets and 25 free signatures per month, then $0.10 per signature. Pro is $99/mo.
Privy vs Turnkey (2026): SDK vs Infrastructure, and Turnkey alternatives.
Magic offers embedded wallets and passwordless authentication, historically known for email magic-link login and a delegated key management model backed by hardware security modules. It pioneered invisible wallet onboarding and remains a strong choice for simple, email-first flows on EVM chains.
Signing is delegated to provider-operated infrastructure rather than a device-bound key. If access to the email account grants the provider the ability to sign, wallet security reduces to the security of that inbox. Cavos separates the two: identity selects which account you are, but a device factor is required to sign. In 2026 Payward, the parent of Kraken, acquired Magic Labs wallet infrastructure.
Choose Magic when you want the simplest possible email-link onboarding on EVM, or a mature provider for a straightforward wallet requirement. The public Developer plan includes 1,000 monthly active wallets and 50,000 signatures at $0/mo. The next listed team plan is $99/mo with 2,500 monthly active wallets.
Ask the custody question first (whether a provider network share participates in reconstruction), then the chain question, then whether you are buying a wallet product or signing infrastructure.
Worked one-to-one comparisons live on the compare pages. For the category itself (what an embedded wallet is, and how embedded wallets vs browser extensions, MPC, and device-native models differ), start with embedded wallets and the embedded wallet SDK. The embedded wallet guide is that page.
Web3Auth / MetaMask Embedded Wallets is a strong pick for broad social-login chain coverage and a key you can export. It is not the weaker product; it covers ground Cavos does not. Stay with Web3Auth when the following are true.
There is no single best Web3Auth alternative. The right pick depends on chain and key model. Cavos is the alternative when the product is on Starknet, Solana, or Stellar and the review requires a device-native key. Privy is the more mature finished SDK across EVM. Dynamic is stronger when you must connect wallets users already hold. Turnkey is key-management infrastructure, not a finished SDK. Magic fits simple email-first EVM onboarding. Web3Auth / MetaMask Embedded Wallets itself remains a strong pick for broad social-login chain coverage and a key you can export.
Yes. Cavos is free for the first 1,000 wallet creates, then Essential at $59/mo and Complete at $139/mo. Magic’s Developer plan includes 1,000 monthly active wallets and 50,000 signatures at $0/mo. Turnkey’s Pay as you go tier includes 1,000 wallets and 25 free signatures per month. Privy’s own Developer free tier is 0–499 MAU. Web3Auth / MetaMask Embedded Wallets already starts free at 1,000 monthly active wallets. Those figures are from each vendor’s public pricing page as of October 2026 and can change.
Cavos ships native adapters for all three: an audited OpenZeppelin account contract on Starknet, a native Ed25519 system account on Solana, and a classic G-account on Stellar. The OpenZeppelin audit covers that contract, not Cavos. MetaMask Embedded Wallets lists EVM, Solana, and additional networks including StarkNet on its product page; feature parity still varies by chain.
No. They sit on different key models. Web3Auth / MetaMask Embedded Wallets is a social-login MPC wallet layer with broad chain coverage and key export. Cavos is a finished embedded wallet SDK: auth, a device-native account, passkey or Nitro Enclave sealed restore, and Gas Sponsorship in Any Token on Starknet, Solana, and Stellar. Wallet addresses are derived differently, so accounts do not transfer as a config change.
Yes. Consensys acquired Web3Auth in 2025 and now ships it as MetaMask Embedded Wallets. This page is the shortlist for Web3Auth alternatives, Web3Auth competitors, and MetaMask Embedded Wallet alternatives. The one-to-one is Cavos vs Web3Auth.
Cavos, Privy, Dynamic, Turnkey, and Magic are the five MetaMask Embedded Wallet alternatives compared here. They are also the usual Web3Auth competitors. Cavos fits Starknet, Solana, or Stellar with a device-native key. Privy is the closer finished-SDK comparison on EVM. Dynamic fits connecting wallets users already hold. Turnkey is signing infrastructure. Magic fits email-first EVM onboarding.
If you want an embedded wallet instead of Web3Auth / MetaMask Embedded Wallets, the usual shortlist is Cavos, Privy, Dynamic, Turnkey, and Magic. Cavos is the comparison when the product is on Starknet, Solana, or Stellar and the review requires a device-native key. Privy is the closer finished-SDK comparison on EVM. The one-to-one is Cavos vs Web3Auth.
Start with the quickstart, or talk to us about a production integration.
We use anonymous analytics to understand how developers use Cavos. No personal data is collected. Privacy Policy
