Hanko

Hanko is an open-source authentication and user management system. It is framework-agnostic and designed with privacy-oriented principles such as data minimization and phishing resistance.

Hanko is used by software development teams building B2C and B2B applications that require an authentication solution. It serves organizations of all sizes worldwide across sectors such as enterprise software, financial services, crypto, consumer applications, healthcare, government, and gaming. Notable reference customers include SAP, adesso, Volt.io, eqx, German Cooperative Banks, and the Schleswig-Holstein State Association of Statutory Health Insurance Physicians.

Hanko supports a wide range of authentication methods, including passwords, multi-factor authentication (MFA), passkeys, social logins, and SAML single sign-on (SSO). It can be configured for different setups, such as passkey-only, OAuth-only, or configurations where users can delete their own passwords. More traditional setups—such as passwords combined with 2FA or “Sign in with Google”—are also supported.

Hanko Elements, a set of web components, provides a straightforward way to integrate authentication into web applications and can be used by developers with varying levels of experience. Alternatively, the Hanko API is designed to handle authentication and onboarding flow states, and together with the frontend SDK, enables custom frontend implementations for both web and native applications.

Hanko is API-first, implemented in Go, and designed for cloud-native environments. It can be self-hosted or used as a managed service through Hanko Cloud, with infrastructure located in Frankfurt, Germany.