Open-source authentication and authorization server adding two-factor login and single sign-on to web apps via a portal used with reverse proxies.
- Stars
- 9,044
- Forks
- 1,020
- Open issues
- 71
- Last commit
- 12 hours ago
What is it?
Hanko is an open source authentication and user management solution that can be integrated into web apps regardless of frontend framework. It covers passwords, passcodes, passkeys, MFA (TOTP and security keys), social logins, and SAML enterprise SSO, and it can be configured for passkey-only or OAuth-only sign-in.
The project is made of a Go backend API that handles authentication, onboarding flows, user and session management, and JWT issuing; Hanko Elements, customizable web components for login, onboarding and profile screens; and a frontend SDK for teams that want to build their own UI on top of the API. A quickstart app and framework examples are included, and Docker Compose files help run the stack locally.
The backend and most of the repository are licensed under AGPL-3.0, while the Elements and frontend SDK packages use the MIT license. A managed version is offered as Hanko Cloud.
Key features
- 01Supports passwords, passcodes, passkeys, and social logins
- 02Provides MFA with TOTP and security keys
- 03Offers SAML enterprise SSO and custom OIDC/OAuth connections
- 04Includes customizable web components for login and profile screens
- 05Supports server-side sessions with remote revocation and webhooks
Use cases
- Adding passkey-based passwordless login to a web app
- Replacing a hosted auth service with a self-managed backend
- Providing enterprise SAML SSO for B2B applications
- Building a custom login UI on top of a JWT-issuing auth API
Quick start
- 1
Try the hosted live example or the quickstart app to see the login experience
- 2
To run locally, follow the Docker quickstart guide in quickstart/README.md (Run the quickstart section)
- 3
For a bare-metal setup, follow the backend README to run the Hanko backend
- 4
Integrate hanko-elements web components using the framework examples and guides
Things to know
- The backend is licensed under AGPL-3.0, a copyleft license, and commercial use requires a separate license arranged with the vendor.
- Organizations, roles and permissions are still in progress, and iOS, Android, React Native and Flutter SDKs are not yet available.
- Self-hosting requires setting up the backend and its services yourself, or using the paid Hanko Cloud.
Topics
FAQ
- What is hanko?
- Open source authentication and user management backend with passkeys, passwords, MFA, OAuth and SAML SSO, plus web components. Hanko is an open source authentication and user management solution that can be integrated into web apps regardless of frontend framework. It covers passwords, passcodes, passkeys, MFA (TOTP and security keys), social logins, and SAML enterprise SSO, and it can be configured for passkey-only or OAuth-only sign-in.
- Is hanko free to use? What license does it have?
- hanko is open source under the Other license. Check the license terms before using it in commercial products.
- Is hanko still maintained?
- Actively maintained. The last commit to hanko was on Oct 20, 2026.
- What can I use hanko for?
- Adding passkey-based passwordless login to a web app Replacing a hosted auth service with a self-managed backend Providing enterprise SAML SSO for B2B applications Building a custom login UI on top of a JWT-issuing auth API
- How do I install hanko?
- Try the hosted live example or the quickstart app to see the login experience To run locally, follow the Docker quickstart guide in quickstart/README.md (Run the quickstart section) For a bare-metal setup, follow the backend README to run the Hanko backend Integrate hanko-elements web components using the framework examples and guides
- Where can I get hanko?
- The source code and installation instructions are on GitHub: https://github.com/teamhanko/hanko
Summary generated by AI from the project's README. GitHub stats refresh daily.
Related projects
Self-hostable authentication server covering passwordless login, passkeys, MFA, SSO and social login, with a pre-built login UI and admin portal.
A framework-agnostic authentication and authorization framework for TypeScript, with a plugin system for features like 2FA and multi-tenancy.
A tiny authentication and authorization server that works as middleware for Traefik, Nginx and Caddy, or as a standalone SSO login server.
A lightweight, self-hosted OpenID Connect identity provider for small teams, with password login, mandatory TOTP and RBAC.
Open source identity and access management server that handles user federation, authentication, user management and fine-grained authorization for apps and services.