Logo
Deploy Now

SaaS Alternative

Auth0 Firebase Auth Clerk

Categories

Developer Tools Security Authentication Identity Management SSO User Management Passkeys

Developer links

Last Updated: 01-01-2023 12:00 AM (UTC)

Hanko

Backed by 9,000+ GitHub stars and developed by a Germany-based team with deep FIDO2 expertise, Hanko delivers the open-source authentication platform that replaces Auth0, Clerk, and Firebase Auth with a passkey-first architecture built on phishing-resistant WebAuthn credentials. The Go backend exposes both public and administrative HTTP APIs handling passkey registration and login, password authentication, email passcodes, TOTP-based MFA, security key verification, server-side sessions with remote revocation, and JWT issuing with configurable expiry and refresh policies. OAuth SSO connects Apple, Google, GitHub, Microsoft, and custom OIDC providers, while SAML Enterprise SSO integrates corporate identity providers for single sign-on across the organization. Hanko Elements provides framework-agnostic web components that embed complete onboarding, login, and user profile flows into any application with two lines of code, fully customizable via CSS variables and supporting i18n with custom translations. The JavaScript frontend SDK handles API communication, credential management, and session state for teams building custom authentication UIs without the pre-built components. Webhooks notify external services of authentication events including user creation, login, email verification, and password changes. Privacy-first design principles enforce data minimalism with user-deletable passwords and configurable identifier strategies supporting email-only, username-only, or combined approaches. Docker deployment starts the backend with PostgreSQL or MySQL, serving both APIs on configurable ports. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 (backend) / MIT (frontend) licensed.

Hanko
Hanko
Hanko
Hanko
Hanko

Benefits

  • FIDO2-Certified Passkey Authentication
  • WebAuthn-based passkey registration and login provide phishing-resistant credentials that eliminate password breaches, with fallback support for passwords, passcodes, and security keys during migration.
  • Drop-In Web Components Integration
  • Hanko Elements embed complete login, registration, and profile management flows into any web application with two lines of code, fully customizable via CSS variables and i18n translations.
  • Enterprise SSO Without Vendor Lock-In
  • OAuth connections to Apple, Google, GitHub, Microsoft, and custom OIDC providers plus SAML Enterprise SSO enable corporate identity integration while remaining fully self-hosted and open source.
  • Privacy-First Data Minimalism
  • User-deletable passwords, configurable identifier strategies, server-side session management with remote revocation, and EU-hostable infrastructure give teams full control over authentication data.

Features

  • Multi-Factor Authentication
  • TOTP authenticator apps and WebAuthn security keys provide second-factor verification, configurable per-user or enforced globally with recovery codes for account access.
  • JWT Session Management
  • Configurable token expiry, refresh policies, and server-side session tracking with remote revocation enable secure stateless authentication across distributed services.
  • OAuth and SAML SSO
  • Pre-built connections for Apple, Google, GitHub, Microsoft plus custom OIDC providers and SAML Enterprise SSO integrate existing corporate identity infrastructure without forking.
  • JavaScript Frontend SDK
  • TypeScript client handles API communication, credential management, WebAuthn ceremony orchestration, and session state for teams building fully custom authentication interfaces.
  • Webhook Event System
  • Authentication events including user creation, login, email verification, password changes, and session revocation notify external services via configurable HTTP webhooks.