Hanko

Hanko is an open-source authentication platform built passkey-first — passkeys are the primary authentication mechanism rather than a secondary option added alongside passwords. The platform supports passkey registration and login, email OTP as fallback, OAuth connections (Google, GitHub), and session management. For teams building products targeting a passwordless-native user experience, Hanko provides authentication infrastructure designed for passkeys from the ground up rather than retrofitted.

Authentication to the Hanko management API uses API keys for server-side administration. The passkey-centric model means user authentication flows use WebAuthn under the hood — the Hanko API handles the WebAuthn challenge-response complexity. Self-hosted Hanko deployments require appropriate database and secret management setup.

Documentation covers the integration patterns, web component setup, and management API clearly. The passkey UX documentation is useful context for teams unfamiliar with WebAuthn flows. Teams evaluating Hanko for passkey authentication should compare with other passkey providers (WebAuthn.io, SimpleWebAuthn) to understand where managed platforms add value over raw WebAuthn libraries.

The API covers user management, authentication session management, passkey registration, and OAuth connection handling. The Hanko Elements web component handles the authentication UI, reducing frontend integration work. Agents managing user accounts can use the management API for user lifecycle operations without building custom passkey management flows.

Reliability for self-hosted Hanko is the team's operational responsibility. Hanko Cloud provides the managed infrastructure. The passkey-first design has inherent reliability dependencies on device-side credential storage — teams should implement appropriate fallback paths for users whose passkey devices are unavailable.