Last updated
Open source authentication solution with passkeys, 2FA, SSO support. GDPR compliant, built in Europe. Switch between self-hosted and cloud anytime.
Open-source authentication from Kiel putting passkeys first, with passwords, passcodes and OAuth logins, self-hosted or cloud with no lock-in.
Hanko is an open-source authentication and user management platform from Kiel, Germany, built as a modern, privacy-first alternative to Auth0, Clerk, and Cognito. It puts passkeys front and centre while still supporting passwords, passcodes, and OAuth social logins.
Developers get Hanko Elements, a set of framework-agnostic Web Components that drop into any frontend in minutes, plus a full backend API for custom flows. The Passkey API can also be bolted onto existing auth systems without a full migration.
Key features:
- Passkey-first authentication with FIDO2-certified, phishing-resistant biometric login
- Multiple auth methods including passwords, email passcodes, OAuth (Google, Apple, GitHub), and 2FA
- Hanko Elements, framework-agnostic Web Components for React, Vue, Angular, and more
- Flexible hosting, either self-hosted (AGPLv3) or Hanko Cloud with no lock-in migration
- User management with profiles, sessions, and audit logs out of the box
- GDPR compliant with EU infrastructure and data minimalism by design
Trusted by 10,000+ developers and used in production by SAP and Volt.io. The core is fully open source under AGPLv3 and MIT licences, with GitHub stars growing fast.
Categories
European alternative to
Head-to-head comparisons
See how Hanko stacks up side-by-side against the non-EU incumbent on jurisdiction, GDPR, pricing, and features.
Similar European alternatives
Veriff
Verify customer identities instantly with AI-powered document checks, liveness detection, KYC workflows, and fraud prevention — ISO 27001 and eIDAS certified.
Bitdefender
Award-winning antivirus, EDR, and XDR from Romania's global cybersecurity leader — 100% threat detection scores and 500M+ users protected across 170 countries.
Proton Pass
Securely manage passwords, passkeys, and email aliases. Enjoy autofill, 2FA, secure sharing, and dark web monitoring. Open-source and free forever.
Cookiebot
Automatically scan, categorise, and manage website cookies with a GDPR and CCPA-compliant consent banner — no manual configuration, with continuous re-scanning.
ESET
Multilayered endpoint security for home and business — the NOD32 antivirus engine from Slovakia's cybersecurity pioneer, protecting users in 200+ countries since 1987.
Mullvad DNS
Free public encrypted DNS resolver from Sweden supporting DoH and DoT with QNAME minimization, on the same no-logs infrastructure as Mullvad VPN.