Pocket ID is an open-source, self-hosted OIDC provider that enables passwordless authentication across self-hosted services using passkeys. It is designed to be lightweight and simple to deploy, serving as a minimal alternative to more complex identity providers like Keycloak. The platform supports hardware security keys such as Yubikeys for signing into all connected applications.
Funding
Funding not disclosed
Founders
Product
Problem
Self-hosted application owners need an identity provider to secure access to their services, but mainstream solutions like Keycloak or ORY Hydra are often too complex and resource-intensive for simple use cases. Additionally, traditional password-based authentication introduces security risks and friction for users managing multiple self-hosted applications.
Solution
Pocket ID is a simple, lightweight OIDC provider that allows users to authenticate to self-hosted services using passkeys instead of passwords. The platform focuses on ease of deployment and minimal resource usage, enabling administrators to set up and configure the service quickly. By exclusively supporting passkey authentication, Pocket ID eliminates the need for password management while allowing the use of hardware security keys such as Yubikeys. The system integrates with any application that supports the OIDC standard, providing a streamlined and secure sign-in experience across a user's entire self-hosted ecosystem.
Target Audience
Primary users are self-hosting enthusiasts and homelab administrators who need a simple, secure, and low-maintenance identity provider for their personal applications and services.
Features
- Passkey-first authentication with support for hardware security keys like Yubikeys, removing the need for passwords entirely
- Lightweight architecture that uses very few system resources Falke, suitable for running on low-power hardware or VPS instances
- Standards-based OIDC integration, allowing compatibility with all applications that support the protocol
- Built-in admin UI for managing users, clients, and configuration, including group-based access controls
- Email template customization and support for multiple languages
- Includes a demo instance for testing and SBOM (Software Bill of Materials) generation for enhanced supply chain security