Hanko Hosting Live In 5 Minutes

Deploy Hanko hosting and give your own app a self-hosted sign-in API on your domain. xCloud runs the pinned Hanko v3.1.0 public API with a private PostgreSQL 17 database, applies the schema migration before the API starts, generates the database password and secret key, mounts a persistent volume and publishes the API over HTTPS in minutes — the admin API is not started.

Deploy your Hanko

No terminal
No technical skills needed
No lock-in, cancel anytime

What is Hanko?

Hanko is an open-source authentication backend. It provides passkeys, email passcodes, passwords, MFA and social login as an API that your own web app calls, with login components you drop into your front end.

This template runs the Hanko public API with a private PostgreSQL database. It is not a hosted sign-in page: there is no admin account, and end users register through your app.

From Sign-Up to a Live Auth API In Just 3 Easy Steps

A Hanko setup normally means an API container, a PostgreSQL database, a migration, generated secrets, a volume, a domain and a certificate before the first user can register. This is the same result without assembling any of it.

Step 01
Sign Up
Create your xCloud account and pick Hanko from the OneClick catalog. Choose your domain and target server — there are no install-form fields, because xCloud generates the database password and secret key.
Step 02
We Deploy It For You
One click. We bring up the pinned official Hanko API with a private PostgreSQL 17 database that has no published port, run a one-shot migrate service that exits after applying the schema, mount hanko_postgres_data, and publish the API over HTTPS on your domain.
Step 03
Check The API And Wire It Up
Open https://your-domain/health/alive to confirm the API is running — the first boot creates the schema, usually under a minute. Then set the EMAIL_DELIVERY_SMTP_* values and Save & Redeploy so passcodes can be emailed, and add the Hanko login components to your app.

Everything Hanko Does, On Your Own Server

Hanko runs here as the authentication API for your own app: sign-in methods, a private database and token verification, on a domain you control.

Passkeys, Passcodes And Passwords
Offer passkey, email passcode and password sign-in without building authentication yourself.
Login Components For Your Front End
Use the Hanko login components (hanko-elements) in your front end and point them at your API URL.
Verify Tokens With JWKS
Verify issued tokens in your backend with the published JWKS URL, shown in your installation credentials.
Private PostgreSQL
PostgreSQL 17 has no published port, and a one-shot migration applies the schema before the API starts.
Public API Only
Only the public API runs; the unauthenticated admin API is not started.
Signing Key Persists
Users, credentials, sessions and the encrypted signing key live in hanko_postgres_data and survived an xCloud Restart with the same key and a still-valid token.

Everything You Need To Run Your Auth API 24/7

Managed hosting for Hanko, so the parts that keep it online are not your problem.

Hanko v3.1.0 deployed instantly
Official image pinned by digest
Database password and secret key generated
Kept behind xCloud nginx
Free SSL certificate
Server backups and snapshots
Server security updates included
30+ server locations
Unused balance refunded

What You Can Do With Hanko

Add passkey sign-in to your app
Let users sign in with passkeys, email passcodes or passwords without writing the authentication flows yourself.
Keep user data in your own database
Self-host the sign-in API so users and credentials stay in a PostgreSQL database you control.
Drop in a ready login UI
Use the hanko-elements login components in your front end and point them at your Hanko URL.
Protect your backend
Verify the tokens Hanko issues in your own backend using the published JWKS URL.

Hanko vs Alternatives

Keycloak: Keycloak is a full identity and access management server with single sign-on; Hanko is an authentication API with passkey-first login components for your own app.
Logto: Logto is another self-hosted identity service you can run on xCloud, with its own sign-in experience.
Auth0: Auth0 is a hosted authentication service run by a vendor, while Hanko keeps users and credentials in your own database.

Simple Pricing. Everything Included.

Dedicated Cloud VPS sizes, pre-configured for Hanko hosting. Pick the one that fits, and resize any time.

Cloud VPS 6 GB

Cloud VPS 16 GB

More headroom if Hanko sits alongside your app and its database.

$59.99per month

16 GB RAM
6 vCPU cores
200 GB NVMe SSD
30 TB
Unlimited

Get started

Every size is a dedicated Cloud VPS we provision, patch, monitor and restore. Billed monthly with no lock-in — delete the server and the unused balance comes back to your account. Hanko itself is licensed by Hanko's maintainers under AGPL-3.0.

Docker hosting

Already Have a Server? Bring Your Own

Connect any VPS — DigitalOcean, Vultr, Linode, AWS, Hetzner or bare metal — and deploy Hanko on it through the same panel, for a per-server management fee instead of a Cloud VPS rental.

Free

Start your journey without cost.

$0forever

1 server
10 sites

Start free

Starter

Professional

The same platform, discounted at 6–10 servers.

$4per server / month

6–10 servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Agency

The same platform, discounted at 11+ servers.

$3per server / month

11+ servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Priced per connected server, so your rate adjusts automatically as you add or remove servers. You pay your own provider for the server itself.

Self-managed hosting

Ready To Run Your Own Auth Backend?

Hanko on xCloud runs on a dedicated Cloud VPS that we provision, patch, monitor and restore. Deploy faster. Own the server. Stay in control.

Fast Provisioning
Deploy faster using an xCloud Managed Server built with optimized stacks and high-speed SSDs.
Enterprise-grade security
Protect your infrastructure with a free SSL certificate and more advanced security features at no additional cost.
Intuitive Control Panel
From Server creation to application deployment, everything can be managed from our intuitive control panel.

Hear what people are saying about us

See why agencies, developers, startups, and growing businesses choose xCloud to power their projects.

xCloud works really well, I am surprised by its performance being this the release version, I have tried many paid platforms such as runcloud, cloudpages or serveravatar, as well as free platforms such as CyberPanel, CloudPanel or Hestia Control Panel and direct competitors such as SpinupWP and FlyWP. Of all those that I have tried, the platform that works best for WordPress is SpinupWP and I believe that xCloud can reach and surpass that development, its roadmap is promising. Congratulations to the xCloud team, I hope they become the leading platform in the segment, it has all the potential to achieve it!

Brian Geovanny

I've been with runcloud for the last 3 years. However, after trying xcloud for the last month, I'm switching over. They are on a roll with their setup.

Kevin Pineda

I'm moving my servers to xCloud, a cloud control panel by M Asif Rahman and the WPDeveloper team. Their roadmap looks interesting and no, there are no team mates nor API limits with xCloud! #xCloud #wordpress #hosting

Leo Koo

How Cloud Nine Web Elevated Client Experience While Streamlining Hosting Operations using xCloud

Ed Ellingham

xCloud is like having an expert server team on call — without the big agency costs. It's given me back my time and given my clients peace of mind. Highly recommended for freelancers and small teams who want reliable performance and security.

Dumitru Butucel

xCloud isn't just a solution. It's like one of that friend who got your back when you screw things up pretty bad.

Waqar Ahmed

Trust me when I say, once people explore the potential of xCloud they gonna switch from other panels, just keep delivering the best tech, lots of love for the team 😍😍

Rahul Singh

So far my experience has been smooth like silk. I didn't imagine that configuring and managing a VPS would be so easy. As of today, I have deployed 8 sites. The support is good, and they treat users with respect, even if they ask stupid questions (myself included). For the future, I hope for greater flexibility in scheduled backups and more comprehensive and consistent documentation. I'm sure that within a few months, xCloud will become the leader in its segment. This community is amazing, and the Staff here is super helpful.

Massimo Villa

Came from cloudways then to runcloud then to xcloud. Looks like I'm staying here.

Gerson El

I've recently taken all of my Vultr-hosted sites and gotten rid of cPanel for them to substitute it with xCloud. I have to say, I'm really impressed with xCloud so far! The interface is definitely the standout feature for me.

Tony Lewis

I came from Cloudways and won't go back. Highly impressed with xCloud. Glad I gave them a chance.

Jared McDowell

I like xCloud better than RunCloud, but one thing I'll point out is that some years ago RunCloud was hungry for business, the support was outstanding, and the community was active and helped each other. Maybe it was sold, there was a change in management, or they stopped being hungry, but the quality of the RunCloud offering declined and it hasn't been moving forward quickly. My point is that currently the xCloud team has the edge and it is theirs to keep or lose

David McCan

How Kevin Heinrichs Cut Hosting Costs by 84% While Running WooCommerce & Node.js Sites Efficiently

Kevin Heinrichs

I had 150 sites on cloudways and am in the process of moving them to xcloud. Much faster and better priced.

Dan Spinoza

Dear xCloud Team, I have been using xCloud for some time now and am genuinely impressed with its capabilities and the flexibility it offers by allowing users to bring their own VPS for management. It's a fantastic service, and my experience so far has been very positive. Successful migrated 5 sites on a single server. Xcloud migration tool worked great. There were few hiccups with security plugin like MalCare but disabling the plugin prior to migration worked just fine.

Rahil Maknojia

Came from runcloud. Tried xcloud and never came back.

Karl Fanega

How Advanced Web Strategies Saved Over $2,000 & Recovered 56 Hours per Month Managing 70+ Client Websites

Gary Moody

xCloud gave me what no other hosting platform could: the flexibility of a VPS with the convenience of managed WordPress. As a solo founder running an entire business on one server, that combination is an important unfair advantage.

Jorge de los Reyes Martínez

I use Server Avatar and xCloud and I'll sooner use xCloud than Server Avatar personally.

Jay Pagano

How Newman Web Solutions Ensured Perfect Uptime and Seamless Scaling For 120+ WordPress Sites with xCloud

Lori Newman

I too have moved over to xCloud. It's pretty sweet. One click n8n and uptime Kuma apps

John Aperture

I went from Cloudways to xCloud. No intention on switching in the foreseeable future.

Blaine Moore

Frequently Asked Questions

Feel free to contact us with any questions or concerns you may have.

Is Hanko a hosted sign-in page?

No. It is an API for your own app. You add the Hanko login components to your front end and point them at your Hanko URL; the site root itself has no page.

How do I sign in or create the first user?

There is no admin account. Users register through your app's Hanko login components; the first passcode is delivered by email, so configure SMTP first.

Why can't anyone finish sign-up yet?

Until you set the EMAIL_DELIVERY_SMTP_* values and EMAIL_DELIVERY_FROM_ADDRESS in the Environment tab and Save & Redeploy, no passcode email can be sent, so sign-up cannot be completed.

What runs alongside Hanko?

A private PostgreSQL database and a one-shot migration service. Nothing else is exposed.

How do I check that it is running?

Open /health/alive on your domain; it answers when the API is running. The first boot creates the schema, usually in under a minute.

Can I use passkeys on a different domain later?

Passkeys are tied to the domain they were registered on. Pick the final domain first; passcode and password sign-in keep working if it changes.

My app is on another origin. What do I change?

Add it to EXTRA_CORS_ALLOW_ORIGINS and EXTRA_WEBAUTHN_RELYING_PARTY_ORIGINS in the Environment editor, then Save & Redeploy.

What should I back up?

The hanko_postgres_data volume (for example with pg_dump) together with the secret key. Both are needed to restore, and the secret key must never be changed or removed.

Backups in xCloud

Does xCloud automatically back up or update Hanko?

No. The template pins the image by immutable digest; existing sites are not automatically upgraded. Read the upstream release notes, back up PostgreSQL, then bump the readable tag and digest together on your own schedule. Server-level backups and snapshots are available on every Cloud VPS.

What are the server requirements, and why does this page sell 6 GB?

The template's baseline asks for 1 CPU core, 512 MB of RAM and 5 GB of disk; measured idle use in QA was about 60 MiB. This page sells the 6 GB tier as the entry rung, with real headroom above that baseline.

Is xCloud officially partnered with Hanko?

No. No official partnership or endorsement between xCloud and the Hanko project has been verified. This is a deployment and server-management option for the open-source Hanko project.

Can I cancel anytime?

Yes. There is no lock-in — cancel any time. Hosting is billed monthly and charged for what you actually use, so when you delete the server the unused balance is refunded to your account, less up to 10% in payment-processing fees.