Hanko Hosting Live In 5 Minutes

Deploy Hanko hosting and add passkey, passcode and password sign-in to your own app through an API on your own domain. xCloud runs the pinned Hanko v3.1.0 public API with a private PostgreSQL 17 database, generates the secret key and database password and publishes it over HTTPS in minutes. Hanko has no sign-in page of its own and needs your SMTP settings before sign-up works.

Deploy your Hanko

No terminal
No technical skills needed
No lock-in, cancel anytime

What is Hanko?

Hanko is an open-source authentication and user management solution built on privacy-first principles such as phishing resistance. It supports passkeys, passwords, MFA, social login and email passcodes, exposed as an API your own app calls, with Hanko Elements web components for the front end. Run on your own server it is a self-hosted Hanko, an alternative to a hosted sign-in service such as Clerk or Stytch, with the backend under the AGPL-3.0 licence.

On xCloud it is the upstream Hanko v3.1.0 image running only the public API, with PostgreSQL 17, both pinned by digest. A one-shot migration creates the schema first. The site root has no page, there is no admin interface, and the unauthenticated admin API is not started. Sign-in sends an email passcode, so you set SMTP before sign-up can complete, and passkeys are bound to your domain.

From Sign-Up to a Live Hanko In Just 3 Easy Steps

A Hanko backend normally means the API, a database, a schema migration, generated secrets, a domain and a certificate before your app can sign anyone in. This is the same result without assembling any of it.

Step 01
Sign Up
Create your xCloud account and pick Hanko from the OneClick catalog. Choose a domain and target server; the install form has no fields to fill in.
Step 02
We Deploy It For You
One click. We start Hanko v3.1.0 and PostgreSQL 17, both pinned by digest, generate the secret key and database password, run the schema migration, mount hanko_postgres_data and publish the API over HTTPS.
Step 03
Add SMTP And Connect Your App
Fill in the EMAIL_DELIVERY_SMTP values in the Environment editor and redeploy, then load the Hanko login components in your app and point them at your API URL. Verify tokens with the JWKS URL.

Everything Hanko Does, On Your Own Server

Hanko v3.1.0 runs here as the authentication API for your own app, backed by a database you own.

Passkeys And Passcodes
Users can sign in with passkeys or email passcodes, and the API also supports passwords, MFA and social login.
An API For Your App
Hanko ships no user interface. You add its login components to your app and point them at your API URL.
Tokens You Can Verify
Hanko issues tokens that your backend verifies against the JWKS URL, shown in the credentials.
Private PostgreSQL
Users, credentials, sessions and the encrypted signing key sit in a PostgreSQL database that is never published.
Open Sign-Up, No Admin
Anyone who can reach the API can register, and each user manages only their own account. No admin interface or user-management API runs.
Secret Key To Guard
The generated secret key encrypts the signing key in the database. Keep it private, never change it and back it up with the volume.

Everything You Need To Run Your Authentication 24/7

Managed hosting for Hanko, so the parts that keep it online are not your problem.

Hanko v3.1.0 deployed instantly
Images pinned by digest
Secret key and database password generated
Free SSL certificate
PostgreSQL on a persistent volume
Server backups and snapshots
Server security updates included
Choose your server region
Unused balance refunded

What You Can Do With Hanko

Add passkey sign-in to your app
Let your users log in with passkeys by dropping Hanko's login components into your front end.
Own your user accounts
Keep credentials and sessions in your own PostgreSQL database instead of a hosted auth vendor.
Verify logins in your backend
Check the tokens Hanko issues against its JWKS endpoint without trusting the front end.
Offer passcode and password fallbacks
Support email passcodes and passwords alongside passkeys for users whose devices cannot use them.

Hanko vs Alternatives

Clerk: As a self-hosted alternative to Clerk and to Stytch, Hanko is an AGPL-3.0 authentication API with passkeys, passcodes and passwords, with accounts kept in your own PostgreSQL database.
Keycloak: Keycloak has its own OneClick page. In a Hanko vs Keycloak comparison, Hanko is an API your own app calls, with Hanko Elements login components and no admin interface in this template.
Logto: Logto has its own OneClick page. In a Hanko vs Logto comparison, Hanko issues tokens your backend verifies against its JWKS URL.
Zitadel: Zitadel has its own OneClick page; compare it with Hanko, which runs here as a public authentication API backed by PostgreSQL.

Simple Pricing. Everything Included.

Dedicated Cloud VPS sizes, pre-configured for Hanko hosting. Pick the one that fits, and resize any time.

Cloud VPS 6 GB

Cloud VPS 16 GB

Headroom for more users and a shared server.

$59.99per month

16 GB RAM
6 vCPU cores
200 GB NVMe SSD
30 TB
Unlimited

Get started

Every size is a dedicated Cloud VPS we provision, patch, monitor and restore. Billed monthly with no lock-in — delete the server and the unused balance comes back to your account. Hanko is licensed under AGPL-3.0, with MIT front-end packages.

Docker hosting

Already Have a Server? Bring Your Own

Connect any VPS — DigitalOcean, Vultr, Linode, AWS, Hetzner or bare metal — and deploy Hanko on it through the same panel, for a per-server management fee instead of a Cloud VPS rental.

Free

Start your journey without cost.

$0forever

1 server
10 sites

Start free

Starter

Professional

The same platform, discounted at 6–10 servers.

$4per server / month

6–10 servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Agency

The same platform, discounted at 11+ servers.

$3per server / month

11+ servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Priced per connected server, so your rate adjusts automatically as you add or remove servers. You pay your own provider for the server itself.

Self-managed hosting

Ready To Run Your Own Authentication API?

Hanko on xCloud runs on a dedicated Cloud VPS that we provision, patch, monitor and restore. Deploy faster. Own your data. Stay in control.

Fast Provisioning
Deploy faster using an xCloud Managed Server built with optimized stacks and high-speed SSDs.
Enterprise-grade security
Protect your infrastructure with a free SSL certificate and more advanced security features at no additional cost.
Intuitive Control Panel
From Server creation to application deployment, everything can be managed from our intuitive control panel.

Hear what people are saying about us

See why agencies, developers, startups, and growing businesses choose xCloud to power their projects.

xCloud works really well, I am surprised by its performance being this the release version, I have tried many paid platforms such as runcloud, cloudpages or serveravatar, as well as free platforms such as CyberPanel, CloudPanel or Hestia Control Panel and direct competitors such as SpinupWP and FlyWP. Of all those that I have tried, the platform that works best for WordPress is SpinupWP and I believe that xCloud can reach and surpass that development, its roadmap is promising. Congratulations to the xCloud team, I hope they become the leading platform in the segment, it has all the potential to achieve it!

Brian Geovanny

I've been with runcloud for the last 3 years. However, after trying xcloud for the last month, I'm switching over. They are on a roll with their setup.

Kevin Pineda

I'm moving my servers to xCloud, a cloud control panel by M Asif Rahman and the WPDeveloper team. Their roadmap looks interesting and no, there are no team mates nor API limits with xCloud! #xCloud #wordpress #hosting

Leo Koo

How Cloud Nine Web Elevated Client Experience While Streamlining Hosting Operations using xCloud

Ed Ellingham

xCloud is like having an expert server team on call — without the big agency costs. It's given me back my time and given my clients peace of mind. Highly recommended for freelancers and small teams who want reliable performance and security.

Dumitru Butucel

xCloud isn't just a solution. It's like one of that friend who got your back when you screw things up pretty bad.

Waqar Ahmed

Trust me when I say, once people explore the potential of xCloud they gonna switch from other panels, just keep delivering the best tech, lots of love for the team 😍😍

Rahul Singh

So far my experience has been smooth like silk. I didn't imagine that configuring and managing a VPS would be so easy. As of today, I have deployed 8 sites. The support is good, and they treat users with respect, even if they ask stupid questions (myself included). For the future, I hope for greater flexibility in scheduled backups and more comprehensive and consistent documentation. I'm sure that within a few months, xCloud will become the leader in its segment. This community is amazing, and the Staff here is super helpful.

Massimo Villa

Came from cloudways then to runcloud then to xcloud. Looks like I'm staying here.

Gerson El

I've recently taken all of my Vultr-hosted sites and gotten rid of cPanel for them to substitute it with xCloud. I have to say, I'm really impressed with xCloud so far! The interface is definitely the standout feature for me.

Tony Lewis

I came from Cloudways and won't go back. Highly impressed with xCloud. Glad I gave them a chance.

Jared McDowell

I like xCloud better than RunCloud, but one thing I'll point out is that some years ago RunCloud was hungry for business, the support was outstanding, and the community was active and helped each other. Maybe it was sold, there was a change in management, or they stopped being hungry, but the quality of the RunCloud offering declined and it hasn't been moving forward quickly. My point is that currently the xCloud team has the edge and it is theirs to keep or lose

David McCan

How Kevin Heinrichs Cut Hosting Costs by 84% While Running WooCommerce & Node.js Sites Efficiently

Kevin Heinrichs

I had 150 sites on cloudways and am in the process of moving them to xcloud. Much faster and better priced.

Dan Spinoza

Dear xCloud Team, I have been using xCloud for some time now and am genuinely impressed with its capabilities and the flexibility it offers by allowing users to bring their own VPS for management. It's a fantastic service, and my experience so far has been very positive. Successful migrated 5 sites on a single server. Xcloud migration tool worked great. There were few hiccups with security plugin like MalCare but disabling the plugin prior to migration worked just fine.

Rahil Maknojia

Came from runcloud. Tried xcloud and never came back.

Karl Fanega

How Advanced Web Strategies Saved Over $2,000 & Recovered 56 Hours per Month Managing 70+ Client Websites

Gary Moody

xCloud gave me what no other hosting platform could: the flexibility of a VPS with the convenience of managed WordPress. As a solo founder running an entire business on one server, that combination is an important unfair advantage.

Jorge de los Reyes Martínez

I use Server Avatar and xCloud and I'll sooner use xCloud than Server Avatar personally.

Jay Pagano

How Newman Web Solutions Ensured Perfect Uptime and Seamless Scaling For 120+ WordPress Sites with xCloud

Lori Newman

I too have moved over to xCloud. It's pretty sweet. One click n8n and uptime Kuma apps

John Aperture

I went from Cloudways to xCloud. No intention on switching in the foreseeable future.

Blaine Moore

Frequently Asked Questions

Feel free to contact us with any questions or concerns you may have.

Can I run Hanko in Docker?

Yes, and this template is Hanko Docker hosting without the setup: the upstream ghcr.io/teamhanko/hanko v3.1.0 image and PostgreSQL 17, both pinned by digest, with a one-shot schema migration, generated secrets and HTTPS on your own domain.

How much RAM does Hanko need?

The template minimum is 512 MB of RAM, 1 CPU core and 5 GB of disk. It runs the public API, a one-shot migration and a private PostgreSQL database. We sell the 6 GB tier first, giving the API and database spare memory.

Does Hanko have a login page or admin dashboard?

No. Hanko is an API for your own app, so the site root has no page. You add the Hanko login components to your app. The unauthenticated admin API is not started, so there is no admin interface or user-management API.

Does Hanko need an SMTP server?

Yes. Sign-in sends an email passcode, so set every EMAIL_DELIVERY_SMTP value and the from address in the Environment editor and redeploy. Until then no email can be sent, so sign-up cannot be completed and passcodes never arrive.

Can anyone sign up to my Hanko?

Yes. Sign-up is open by default, so anyone who can reach the API can register and sign in, though each user sees and changes only their own account. Visitors share rate-limit buckets unless you set the forwarded-address option.

How do I connect my app to Hanko?

Add the Hanko login components to your app and set their API URL to your domain. If the app runs on another origin, add it to the EXTRA CORS and WebAuthn origin settings. Verify the tokens with the JWKS URL.

What happens to passkeys if I change the domain?

They stop working. Passkeys are bound to the domain, so changing it invalidates registered passkeys, while passcode and password sign-in keep working. Choose the final domain before users enrol passkeys, and keep the same domain.

Is Hanko free?

Yes. The Hanko backend is open source under AGPL-3.0 and its front-end packages are MIT, so the software has no fee. Billing covers the dedicated Cloud VPS that stores your users and credentials, a Hanko cloud of your own.

How do I back up Hanko?

Back up the hanko_postgres_data volume, for example with pg_dump, together with the secret key. The signing key in the database is encrypted with that secret key, and Hanko will not start against the data without it. Nothing schedules this for you.

Backup and restore Docker apps

How do I upgrade Hanko?

The install stays on its pinned v3.1.0 images until you adopt a newer template version. Back up PostgreSQL and the secret key first, read the release notes and let the migration run against a restored copy. Nothing upgrades automatically.

Can I cancel anytime?

Yes. There is no lock-in — cancel any time. Hosting is billed monthly and charged for what you actually use, so when you delete the server the unused balance is refunded to your account, less up to 10% in payment-processing fees.