Provides authentication and user management with support for passkeys, multi factor authentication, and social login integrations.
Hanko is an open-source, self-hosted platform that provides authentication and user management. It is designed as a framework-agnostic solution that can be deployed as a server or used via a managed cloud service. The software handles user onboarding, identity verification, and session management for web applications, focusing on data minimalism and phishing resistance.
Users can integrate the system using the Hanko Elements web components for a pre-built UI or utilize the backend API and frontend SDK to build a custom interface. The system supports various deployment methods, including bare metal installation and Docker containers, allowing for full control over user data and the avoidance of vendor lock-in.
Key features
- Support for passkeys, passwords, and email passcodes
- Multi-factor authentication via TOTP and security keys
- Social login via OAuth SSO for Google, Apple, and GitHub
- Enterprise SSO support through SAML
- Web components for onboarding, login, and user profiles
- Server-side sessions with remote session revocation
- Webhooks for event notifications
- Internationalization and custom translation support
The architecture is divided into three main building blocks. The backend serves as a scalable authentication API that handles JWT issuing and session management. Hanko Elements provides the customizable web components for the user interface, while the frontend SDK offers a client package for those who prefer to build their own UI from scratch. This modular approach allows developers to choose the level of abstraction that fits their project requirements.
The software is built for developers who need a flexible identity provider that supports modern authentication standards like FIDO2 and WebAuthn. By providing a robust API that manages all onboarding flow states, it reduces the complexity of implementing secure login systems in custom frontend environments.
Hanko is a privacy-focused identity provider for developers who require an open-source IAM solution with a focus on phishing resistance.
Similar Open Source Software
Keycloak
An identity and access management server providing single sign-on, user federation, and fine-grained authorization for applications.
Authentik
A self-hosted identity provider for single sign-on that manages authentication and authorization via multiple industry standards.
Join our newsletter to get shiny new open source software delivered to your inbox. Unsubscribe anytime.