Hanko - An Authentication and User Management Solution for the Passkey

Admin

Authentication and user Management
Hanko is an open-source authentication and user management solution with a focus on moving the login beyond passwords while being 100% deployable today.

  • Supports all modern authentication methods, incl. passkeys, social logins, and SAML SSO
  • Highly flexible configuration options (e.g. optional/user-deletable passwords, passkey-only, OAuth-only)
  • Fast integration with Hanko Elements web components (embeddable components for login/registration and account profile)
  • API-first, small footprint, cloud-native

Features

To follow the development of this project, you can sign up for Product News or join the Discord Community. Here's a brief overview of Hanko's current and upcoming features:

Status Feature
✅ Email/username identifiers
✅ Passwords, passcodes, passkeys
✅ Hanko Elements web components
✅ OAuth SSO (Sign in with Apple/Google/GitHub etc.)
✅ i18n & custom translations
✅ SAML Enterprise SSO
✅ Webhooks
✅ Server-side sessions & remote session revocation
✅ MFA (TOTP, security keys)
⚙️ Custom Social SSO connections (OIDC/OAuth2)
⚙️ Privileged sessions & step-up authentication
User impersonation
Improved email templates & i18n
<hanko-menu> web component
Email security notifications
Refresh tokens
Custom user metadata / JWT claims
iOS, Android, React Native, Flutter SDKs

Getting started

  1. You can check the live example and companion page passkeys.io or use the quickstart app to get a feel for the user experience provided by an application that leverages the Hanko backend API and custom web component
  2. To run the project locally, there are two options available:
    • Bare metal:
      • Head over to the backend section to learn how to get it up and running for your own project. Use Hanko Cloud for a hosted backend.
    • Docker:
      • If you prefer to use Docker to run the project locally, please visit the Run the quickstart for information on how to run the project. This will create everything, including frontend and backend components.
      • If you wish to keep only the backend components, you can modify the quickstart.yaml to remove the unnecessary services. To make changes to the configuration to meet your needs, modify config.yaml.
  3. Then, integrate hanko-elements – we provide example applications and guides for your favourite frontend framework in the official documentation
  4. If you have an enterprise license or use Hanko Cloud you can also integrate SAML SSO. Feel free to use this guide to start with SAML SSO

If you want to use the Hanko backend API but prefer to build your own UI, you can still make use of the hanko-frontend-sdk. It forms the basis of web components, and the client it provides handles communication with the Hanko backend API and saves you the time of rolling your own.

Hanko