Hanko

Hanko is an open-source authentication and user-management platform for apps. It supports passkeys, passwords, passwordless sign-in, multi-factor authentication, and single sign-on. Developers can use customizable Hanko Elements web components for onboarding, login, and account management, or build custom authentication frontends with the Flow API. Elements work with web stacks using HTML and JavaScript, and the site links quickstarts and starter templates for frameworks including Next.js, Remix, Nuxt, Svelte, React, Vue, Solid, and Symfony. Hanko can run in Hanko Cloud, a private cloud, or on a customer’s own servers. Hanko Cloud is hosted only in AWS Frankfurt, Germany. Hanko says customers retain control of their data and can move between Cloud and self-hosted deployments. Its Trust Center lists GDPR as compliant and ISO 27001 as in progress. Cloud tiers include 10,000 free monthly active users; the pricing FAQ says user limits do not prevent signups or logins. Starter is free and includes two projects; Pro costs $29 a month and includes five projects.

Hanko offers several authentication methods, developer-facing components, and multiple hosting options. Consider the Cloud region, support tier, and compliance status when selecting a deployment.

Hanko suits app developers who need authentication and user-management tools across web stacks. It also fits teams that want to choose between cloud hosting, private cloud, and self-hosting.

Hanko is an open-source authentication and user-management platform for teams building modern applications. It fits developers who need passkeys and conventional sign-in methods without giving up deployment control. The strongest case for Hanko is its combination of customizable UI, a custom-flow API, and cloud or self-managed hosting; the main qualification is that Hanko Cloud is confined to one AWS region.

Overview

Hanko handles both identity flows and account management. It supports passkeys, passwords, passwordless login, multi-factor authentication, and single sign-on, so a product can offer different assurance levels or migration paths for its users. Passwordless choices include email passcodes, social and OAuth sign-in, SAML SSO, security keys, and authenticator apps. Biometric login and OpenID Connect are supported as well.

Deployment is unusually flexible for an authentication service. Customers can use Hanko Cloud, a private cloud, or run the software on their own servers. Hanko says customers keep control of their data and can move between Cloud and self-hosted deployments. Hanko Cloud is hosted exclusively in AWS Frankfurt, Germany, which suits organizations comfortable with that region but makes another geography a self-hosting decision. The Trust Center identifies GDPR compliance; ISO 27001 is in progress, so organizations requiring that certification should verify whether Hanko meets their current procurement threshold.

Key features

Hanko Elements are customizable, framework-agnostic web components for onboarding, login, and account management. Because they work with web stacks built on HTML and JavaScript, teams can adopt supplied interface pieces without committing to one front-end framework. The Flow API is the better route when the sign-in journey must be designed entirely in a product's own interface.

Quickstarts and starter templates cover Next.js, Remix, Nuxt, Svelte, React, Vue, Solid, and Symfony. That breadth can shorten integration work for common stacks, while the open-source model gives engineering teams more control over how the identity layer is deployed and maintained.

Pricing

Starter is a sensible fit for a small product or evaluation that can rely on community help and two projects. Pro adds three projects and direct support, making it the practical choice for a team operating several environments or needing a support channel beyond the community. Both Cloud tiers include 10,000 free monthly active users, and Hanko says those limits are not enforced to block signups or logins. Enterprise is aimed at B2C or B2B applications with high user counts or regulatory requirements; its SLA, private-cloud option, and priority support justify requesting a quote when operational guarantees matter.

Platforms

Hanko supports Android, iOS, web, API integrations, and self-hosted deployment. The combination covers mobile and browser products while preserving an option to keep the identity service on customer infrastructure.

Who it's for

Choose Hanko when your development team wants passkeys and MFA alongside passwords and SSO, and when hosting location or data ownership is a material architectural concern. It is particularly well suited to teams that want to begin with reusable web components and later move to a custom authentication front end. Teams that need a non-Frankfurt managed region or ISO 27001 certification today should look beyond Hanko Cloud or plan for self-hosting.

Pros and cons

Pros

• Broad authentication coverage: passkeys, passwordless channels, SAML SSO, MFA, biometric login, and OpenID Connect support varied security and user-experience requirements.
• UI flexibility: Hanko Elements provide reusable components, while the Flow API supports a fully custom frontend.
• Deployment control: private-cloud and self-hosted options reduce dependence on a single hosting model.
• Predictable entry pricing: Starter is free, and Pro begins at $29 a month with 10,000 free monthly active users.

Cons

• Cloud region constraint: managed hosting is limited to AWS Frankfurt.
• Support varies by plan: Starter has community support; personal email and Slack support begin with Pro.
• Certification timing: ISO 27001 is still in progress, which may delay approval for certification-sensitive buyers.

Alternatives

Bitwarden is the better fit for personal or team password management, with a free plan covering unlimited devices and passwords.

Clerk suits teams wanting a hosted developer identity service with a Hobby allowance of 50,000 monthly recurring users per app and up to three dashboard seats.

Descope is worth considering when its open-source SDKs and Free Forever allowance of 7,500 monthly active users match the project.

id3 Face SDK is an alternative for projects centered on face-based identity workflows.

Passwordless.dev is another freemium option for passwordless authentication, with a free tier for up to 10,000 users.

StrongKey FIDO Server is a free, open-source choice that states unlimited users, applications, and transactions for its Community Edition.

WorkOS is an alternative for API-focused teams evaluating separate identity and enterprise-access products.

HUAWEI Analytics Kit is an analytics product rather than a direct authentication substitute.

Verdict

Hanko is a strong recommendation for developers who want modern passkeys and broad authentication coverage with the freedom to use hosted, private-cloud, or self-managed infrastructure. Its customizable components, Flow API, and modest Pro entry price make it easy to scale from a small implementation to a more tailored identity experience. Look elsewhere if your managed service must run outside AWS Frankfurt or if ISO 27001 certification is a current requirement.