Alex MacCaw
@maccaw
Open source, privacy-first, and built to scale. Hanko is the fastest way you integrate passkeys, 2FA, SSO, and more—with full control over your data. Move between self-hosted and Hanko Cloud anytime. No lock-in, just Auth how it should be: secure, user friendly, and fully yours.
By offering a wide range of configuration options and countless combinations of authentication methods, Hanko allows you to tailor your onboarding and login flows precisely to your requirements—with a flip of a switch.
Our recommendation: Modern and secure, utilizing passkeys instead of passwords. Also including a fail-safe fallback login option with passcodes and email verification during sign up.
Hanko works flawlessly with passwords, just as everyone is accustomed to. You have the power to enable passkeys whenever you see fit, seamlessly leading your users into the passwordless future.
Set up social logins as the only option for logins, as this has become increasingly popular lately. Decide which providers you would like to offer and add other login methods later if you want.
Depending on your audience, offering only passkeys for authentication can be a viable and highly secure configuration. Not every device supports passkeys yet, though, so be aware that you may exclude some of your users.
Hanko Elements are customizable Web Components that provide comprehensive functionality and UI for user onboarding, login, and account management, and can be integrated into any web app.
By using Web Components, Hanko Elements work in any tech stack.
Apply custom CSS and let Hanko Elements blend in.
Customize Hanko to your needs with a PR or Fork on GitHub.
Don’t need a full auth solution? Enable your users to skip passwords and traditional 2FA by supporting passkeys. Integrate the Hanko Passkey API into your existing authentication stack and benefit from our industry-leading, FIDO2-certified passkey infrastructure.
No vendor lock-in or lost data. Hanko is open source—and you can always freely migrate your data from Cloud to self-hosted and vice versa.
