Skip to content
Get a quote

Free toolAuth0 Rules and Hooks to Actions checker

Auth0 says Rules and Hooks stop running and are removed after November 18, 2026. Paste your Rules, Hooks or Terraform config to see what each line becomes in Actions, and which parts need more than a rename. The check runs in your browser; nothing is uploaded.

Check my Rules

Free, no sign-up. Dates checked October 23, 2026.

Your project files

Paste several files one after another if you like. Commented-out lines are ignored.

What happens on November 18

Auth0 retires Rules and Hooks in three steps. The last one is the one that changes logins.

  1. May 16, 2023

    Deprecated

    Auth0 deprecated Rules and Hooks, and from October 16, 2023 new tenants no longer get them.

  2. November 18, 2024

    Read-only

    Active Rules and Hooks keep running. You can switch them on or off and change their configuration values or secrets, but not their code, including through Terraform or the Deploy CLI.

  3. November 18, 2026

    End of life

    Auth0 says that after this date Rules and Hooks stop being executed and are removed. Whatever they did at login stops happening.

You can move one Rule at a time. Auth0 says active Rules run before deployed Actions, so you can start at the end of your Rules pipeline, move each step to a post-login Action, and switch the Rule off once the Action works. Hooks also run before Actions.

What it checks

Rules and Hooks
What the code is
A Rule’s function (user, context, callback) signature, a Hook’s module.exports function or context.webtask, and auth0_rule or auth0_hook resources in Terraform.
Needs rework
What Actions can’t do the same way
The global auth0 object and Management API token, data kept on global between logins, context.redirect, and account linking with context.primaryUser.
Direct swaps
Line-by-line changes
Custom ID and access token claims, callback errors, context.multifactor, metadata writes, configuration secrets and context fields, each with the Actions call Auth0’s guides show.
Hook types
Which trigger to use
Client Credentials Exchange, Pre and Post User Registration, Post Change Password and Send Phone Message each map to their own Action trigger and export name.

What this tool can’t see

It reads the code you paste and points at what to change. It doesn’t write the Action for you, it doesn’t map every context field (context.request, context.connection, context.authorization and context.stats are left to Auth0’s guide), and it can’t see Rules or Hooks you didn’t paste. Open the Rules and Hooks sections of your Auth0 Dashboard to list every active one. Also check that nothing in your CI, such as Terraform or the Deploy CLI, still tries to edit them: Rules and Hooks have been read-only since November 18, 2024.

Running your backend on Cloud Functions? The free Cloud Functions Node.js 20 runtime checker shows which runtimes your deploys use and when each one stops accepting updates.

Questions

Is my code sent anywhere?
No. The check runs in your browser with JavaScript, and what you paste never leaves the page. Only an anonymous count of matches is recorded for usage statistics, and the example is not counted.
When do Auth0 Rules and Hooks stop working?
Auth0’s deprecations page says the end of life is November 18, 2026, and that after November 18, 2026, Rules and Hooks will stop being executed and removed. They have been read-only since November 18, 2024.
What happens to logins if I miss the date?
Whatever your Rules and Hooks did stops happening: custom claims disappear from tokens, MFA a Rule turned on is no longer requested, and checks that denied access no longer run. Your app may keep signing people in while skipping those steps.
Can Rules and Actions run at the same time?
Yes. Auth0 says active Rules run before deployed Actions, so you can move one Rule at a time, starting from the end of the pipeline. Auth0 notes that when you switch a Rule off and its Action on, there may be a short window where both or neither run.
What can’t Actions do that Rules could?
Actions don’t get the global auth0 object or a Management API token, can’t keep data between logins the way global did, and must finish within 20 seconds. Auth0 also limits each session to 32 kB each of app and user metadata writes.
If the checker finds nothing, am I clear?
Only for the code you pasted. Open the Rules and Hooks sections of your Auth0 Dashboard to list every active Rule and Hook in each tenant, including staging.

Sources, checked October 23, 2026: Auth0 deprecations and migrations, Auth0 Rules, Auth0 Hooks, Migrate from Rules to Actions, Migrate from Hooks to Actions, Actions limitations.

Need the move to Actions done before November 18?

The App Fix Ticket covers it in two fixed-price steps. A $450 Diagnosis lists every Rule and Hook in your tenant, maps each one to an Action, flags what needs rework, and gives you a fixed quote within 3 business days, credited toward the fix. If you go ahead, the $1,200 Fix comes as a pull request.

Pay $450 & startWhat the App Fix Ticket covers

Link to this checker

Writing about the Auth0 Rules and Hooks end of life or moving to Actions? You’re welcome to link here. The checker is free, needs no sign-up, and never uploads what you paste.

Fixed-price services

Fixed-price help for your app

Fixed scope, fixed price, paid upfront. The work happens in writing; no call needed.