Work in progress: 181,232 of 181,233 sites checked so far, more every week · updated 2 Nov 2026Missing a blog? Tell us

Top all-time · #8178

H

Hanko

Company blog · hanko.io/blog · on HN as FlxMgdnzsecurityweb

Hanko is the company blog at hanko.io, writing about security and web. Since 2022, 10 different Hacker News readers have linked it 13 times, most often “Show HN: Hanko – Open-Source Auth and User Management for the Passkey Era”. No feed was found, so read it on the site itself.

No feed foundVisit the blog
13mentions?
10HN people?
2022–2026first – last linked?
Links on Hacker News per year · peak 7 in 2022

Too few sampled comments (5) to say how often HN recommends it.?

Why HN links it

HN commenters cite Hanko's site and blog for passkey and WebAuthn background, a JWKS explainer, and its open-source authentication product. Most comments use the links as sources or alternatives.

Summarised by Claude from a sample of 5 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.

Open source, privacy-first, and built to scale. Hanko is the fastest way you integrate passkeys, 2FA, SSO, and more, with full control over your data. Move between self-hosted and Hanko Cloud anytime. No lock-in. Just auth how it should be: secure, fast, user friendly, and fully yours.

The author on HN?

FlxMgdnz · 32 karma · member since 2022

Founder of hanko.io felix@hanko.io

From their public HN profile, which links to this site.

Most-linked posts?

  1. Show HN: Hanko – Open-Source Auth and User Management for the Passkey Era
    6 people · 6 mentions · first linked 2022-01-17
  2. Passkeys: Multi-device FIDO credentials can replace passwords
    2 people · 2 mentions · first linked 2022-05-08

What Hacker News says?

  1. If there is an article that explains what's different about passkey under the hood, I've yet to find it. That's not entirely surprising as it's brand new. Still it's mighty frustrating when google searches just page after page of re-writes of fido/google/microsoft press releases, all saying little more than "hey! passkey replaced passwords (and it somehow involves phones and bluetooth)". Yes, I know uses FIDO under…

    Comment linking /blog/on-passkeys

    on “Your phone may soon replace many of your passwords”
  2. Submitted Show HN: Hanko – Open-Source Auth and User Management for the Passkey Era as a story · 11 points

    HN discussion
  3. An open source alternative that was posted last week: https://www.hanko.io/

    Comment linking /

    on “Passage Is Joining 1Password”
  4. Submitted Hanko – open-source authentication and passkey infrastructure as a story · 2 points

    HN discussion
  5. I believe there is a plan to support syncing private keys [0] (that you can turn on via the developer tab in Safari) announced at WWDC 2021 [1] and discussed in this blog post from Hanko [2]. But I have not heard any more about it in the last 10 months. [0] https://developer.apple.com/documentation/authenticationserv... [1] https://www.macrumors.com/2021/06/10/apple-icloud-keychain-p... [2] https://www.hanko.io/blog…

    Comment linking /blog/passkeys-part-1

    on “WebAuthn Browser Support”
  6. Submitted Hanko.io releases the first password-free IAM solution as a story · 2 points

    HN discussion
  7. We’re building https://www.hanko.io It’s a passkey-first authentication solution for websites and mobile apps.

    Comment linking /

    on “Passkeys: A Loss of User Control?”
  8. Submitted Hanko – Build the best login you have ever seen as a story · 1 points

    HN discussion
  9. janober · 2024-07-06Recommends
    Probably worth checking out: https://www.hanko.io/ "Open source auth management for the passkey era"

    Comment linking /

    on “About Passkey – the password-free tech Apple is betting on”
  10. Submitted Passkeys: Multi-device FIDO credentials can replace passwords as a story · 1 points

    HN discussion
  11. A JWKS is defined at /.well-known/jwks.json It's a JSON array of public keys which you can use to validate a JWT which is what an OIDC token is. Making it an array means you can rotate keys whenever but the validator is typically caching the public keys. https://www.hanko.io/blog/understanding-jwks Actually... found it https://datatracker.ietf.org/doc/html/rfc6749 And here's a PHP implementation that is perfect. htt…

    Comment linking /blog/understanding-jwks

    on “So You Want to Define a Well-Known URI”
  12. Hey, we've built exactly what you are describing: https://www.hanko.io You can go with either self-hosted or cloud. Cloud is free for up to 100 users. If you have any questions along the way: https://www.hanko.io/community

    Comment linking /community

    on “Ask HN: Lightweight Authentication”

Search all of HN for hanko.io