SHSelfHostIndex

Pocket ID

Simple OIDC provider that uses only passkeys

Identity & SSO ★ 9.6k stars Easy setup BSD-2-Clause

Pocket ID is an open-source, simple OpenID Connect provider that authenticates users exclusively with passkeys. It is self-hosted to add passwordless SSO to applications with minimal configuration.

Official siteSource code

Key features

  • Passkey-only authentication
  • Simple OIDC provider
  • Minimal configuration
  • Lightweight

Strengths

  • Released under the BSD-2-Clause license
  • Easy to set up — beginner-friendly
  • First-class Docker support for quick deployment
  • Mature project with 9.6k GitHub stars

Is Pocket ID secure?

No known vulnerabilities affect Pocket ID's latest release (v2.18.0). OSV.dev lists 4 past advisories for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2026-55834, published 2026-08-28 (47 days ago), fixed in 2.9.0

Source: OSV.dev, checked 2026-10-14. How this is measured.

Pocket ID replaces

Self-hosted Auth0 alternativesSelf-hosted Authelia alternatives

Health badge

Maintain Pocket ID? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 94 · excellent

Markdown
[![SelfHostIndex health score for Pocket ID](https://selfhostindex.com/badge/pocket-id.svg)](https://selfhostindex.com/app/pocket-id/)
HTML
<a href="https://selfhostindex.com/app/pocket-id/"><img src="https://selfhostindex.com/badge/pocket-id.svg" alt="SelfHostIndex health score for Pocket ID"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/pocket-id.svg
   :alt: SelfHostIndex health score for Pocket ID
   :target: https://selfhostindex.com/app/pocket-id/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Compare Pocket ID

18 head-to-head comparisons.

Similar identity & sso apps