Hanko

Key Features

• Passkey support: Native support for passwordless authentication using modern passkey standards.
• Flexible login flows: Configure passwordless, passwords-optional, social-only, or passkey-only login experiences.
• Social login integration: OAuth SSO support for providers like Google, Apple, GitHub, and custom OIDC/OAuth2 connections.
• Enterprise-ready SSO: Built-in SAML support for enterprise identity providers.
• Multi-factor authentication (MFA): Includes TOTP and hardware security keys.
• Hanko Elements: Customizable web components for seamless integration of login, registration, and user profile management.
• API-first architecture: Lightweight, backend-first design built for flexibility and cloud-native deployment.
• Internationalization (i18n): Support for custom translations and localized experiences.
• Webhooks and session control: Server-side sessions with remote session revocation and event hooks.
• Self-hosting or cloud: Choose between Hanko Cloud or deploy to your own infrastructure, no vendor lock-in.

Meet Hanko: The Complete Open Source Authentication Solution for the Passkey Era

Authentication is evolving. Passwords are no longer the gold standard, and user expectations are shifting toward seamless, secure, and flexible login experiences. That’s where Hanko steps in, a fully open-source authentication and user management solution designed for the era of passkeys and beyond.

Unlike proprietary systems that lock you in, Hanko is designed for full ownership and control. You can deploy it on your own infrastructure or use Hanko Cloud, depending on your needs. It's lightweight, API-first, and cloud-native, making it an excellent fit for modern apps.

Why Hanko?

Hanko brings a forward-thinking philosophy to authentication, removing the traditional barriers associated with login systems. It supports a wide spectrum of modern authentication methods including passkeys, social logins, and SAML-based enterprise SSO. But more importantly, it gives you the flexibility to configure login flows that match your app’s users, not force them into rigid, outdated paradigms.

Whether you want to allow passwords as a fallback, require social logins only, or go all-in on passkeys, Hanko lets you tailor the experience. For example, you can opt for passwordless sign-in by default (Hanko’s recommendation), provide passcodes and email verification as fallback options, or even disable passwords altogether.

This flexibility empowers teams to gently transition users toward a passwordless future, without sacrificing usability today.

Fast Integration, Smooth UX

At the core of Hanko’s developer experience is Hanko Elements, a set of customizable web components that handle login, registration, and account management. These components work in any framework and are styled with your own CSS, making it easy to maintain brand consistency.

Because they are based on standard web components, Hanko Elements drop into any frontend, no matter your tech stack. Integration takes minutes, not days.

Full Feature Set, Fully Open Source

The Hanko platform covers all the essentials and then some. Out of the box, it supports email or username identifiers, passwords, passkeys, multi-factor authentication, OAuth SSO (with providers like Google, Apple, and GitHub), and even custom social connections using OAuth2 or OIDC. It handles server-side sessions, remote revocations, and webhooks for external event handling.

For enterprise use cases, SAML support is already in place. SDKs for JavaScript and mobile platforms (iOS, Android, React Native, Flutter) are on the roadmap. All of this is open source, and development is happening in public.

Built for Developers

The Hanko project is broken down into key modules:

• The backend provides the authentication API and handles passkeys, passwords, SSO, user management, and token issuance.
• Hanko Elements are the embeddable web components for login and onboarding.
• The frontend SDK helps developers interact with the backend via a client library.

A quickstart app and a library of examples for various frameworks make it easy to see Hanko in action and implement it in your own apps.

Modern Auth Without Lock-in

Perhaps the most important aspect of Hanko is what it doesn’t do: lock you in. You can migrate freely between self-hosted and Hanko Cloud deployments. Your data is your own. No proprietary traps. No hidden costs.

This is authentication infrastructure you can trust, transparent, secure, and open to inspection or customization. Fork it. Extend it. Make it your own.

Ready to Join the Passkey Future?

If you're building modern applications and want to offer users a seamless and secure login experience, without being chained to a closed platform, Hanko is ready to help. You can follow development, join the community on Discord, or star the GitHub repo to stay up to date.

For the future of authentication, Hanko is here now, ready to deploy, fully open source, and built for the passkey era.