Pocket ID
A passkey-only OpenID Connect identity provider
Pocket ID is a lightweight OpenID Connect (OIDC) identity provider designed for simple deployments. It focuses on passwordless authentication by using passkeys, enabling users to sign in securely without managing passwords.
Key Features
- OpenID Connect provider for authenticating users to compatible services
- Passkey-only (passwordless) authentication flow
- Designed to be simpler to operate than larger IAM suites for small setups
- Web-based admin/user interface for managing the identity provider
- Container-friendly deployment options for straightforward installation
Use Cases
- Centralized login (OIDC) for homelab and self-hosted applications
- Passwordless sign-in using hardware keys (for example, security keys)
- Lightweight alternative for small teams that only need OIDC authentication
Limitations and Considerations
- Passkey-only approach may not fit environments that require passwords or multiple auth methods
Pocket ID is a good fit when you want an OIDC provider with minimal complexity and a strong passwordless stance. It prioritizes ease of use and modern authentication for smaller, focused deployments.
Categories:
Tags:
Tech Stack:
Go
PostgreSQL
Docker
TypeScript
SvelteSimilar Services
PocketBase
Lightweight open-source realtime backend with embedded SQLite
Open-source Go backend providing embedded SQLite, realtime (SSE) subscriptions, auth (JWT/OAuth2), file storage, admin UI and REST-style APIs for web and mobile apps.
Keycloak
Open-source identity and access management with SSO
Keycloak is an open-source IAM server providing single sign-on, user federation, and centralized authentication and authorization using OIDC, OAuth 2.0, and SAML.
Authelia
Self-hosted IAM with SSO and multi-factor authentication
Authelia is an open-source IAM and authentication server providing SSO, MFA, and access control for web apps, with OpenID Connect/OAuth 2.0 and reverse-proxy integration.
Infisical
Open-source platform for secrets, PKI certificates, and privileged access
Infisical is an open-source platform to manage and deliver app secrets, certificates (PKI), SSH credentials, and encryption keys across teams and infrastructure.
authentik
Open-source Identity Provider (IdP) for SSO, OIDC, and SAML
Open-source IdP delivering SSO, OAuth2/OIDC, SAML2, LDAP, RADIUS, MFA, WebAuthn, conditional access and application-proxy capabilities for self-hosted deployments.
Teleport
Identity-aware access proxy for infrastructure and internal apps
Secure access platform for servers, Kubernetes, databases, desktops, and web apps with SSO/MFA, short-lived certificates, and full session auditing.
