Hanko Authentication Platform

Hanko is an open-source authentication and user management platform that provides passkey-first login, password support, multi-factor authentication, single sign-on, and social login for web and mobile applications. The platform centers on a Flow API that manages multi-step authentication sequences, issuing step-by-step instructions that tell the frontend which UI to render and which action to perform next, eliminating manual state machine implementation on the client side. Drop-in Web Components called Hanko Elements provide ready-made login, registration, and profile management interfaces that work with any web framework because they are framework-agnostic custom elements requiring only HTML and JavaScript. The Profile Element gives end users a self-service interface for managing passkeys, passwords, security keys, authenticator apps, and active sessions. Authentication methods include WebAuthn-based passkeys that sync across devices through platform authenticators, time-based one-time passcodes sent to email, traditional passwords with configurable complexity policies, TOTP authenticator apps, hardware security keys, and social login through OAuth providers. SAML and OIDC enterprise federation connect external identity providers for organizational SSO. The system supports multi-factor enrollment flows where users progressively add security factors after initial sign-up. Deployment options span a managed cloud with 99.99 percent SLA, a dedicated private cloud on a provider of the customer's choice, and full self-hosting on owned infrastructure. Developed by a Germany-based team, the platform offers EU data residency, GDPR compliance, and multi-language support, positioning itself as a privacy-focused alternative to Auth0, Clerk, Firebase Auth, and AWS Cognito without vendor lock-in.