Hanko is an authentication service built passkey-first rather than passkey-eventually. Passwords are optional from the start, and the hosted components handle the awkward parts of the WebAuthn ceremony that teams usually get wrong.
It can run as a managed service or on your own infrastructure against your own Postgres, and the user table stays somewhere you can query.
Decisive facts
- Passkey-first flows with password as an optional fallback
- Prebuilt web components for login, registration, and profile
- Social login, enterprise SSO, and TOTP second factors
- Self-hostable against your own PostgreSQL instance
- Admin API for user management from your own tooling