Pocket ID Hosting Live In 5 Minutes
Pocket ID hosting on xCloud lets you deploy Pocket ID, a self-hosted OIDC provider that signs people in to your applications with passkeys instead of passwords. xCloud runs the pinned image with its embedded SQLite database on a persistent volume, generates the encryption key and publishes it over HTTPS on your domain, which passkeys require. You create the first administrator on the setup page.
- No terminal
- No technical skills needed
- No lock-in, cancel anytime
What is Pocket ID?
Pocket ID is an easy-to-use OpenID Connect Certified and OAuth 2.0 provider that lets users sign in to their applications with passkeys. It supports passkey authentication only, so there are no passwords to manage. Upstream names Keycloak and ORY Hydra as other self-hosted providers and calls them often too complex for simple use cases. A self-hosted Pocket ID gives your applications single sign-on without a hosted identity service. It is BSD-2-Clause licensed.
On xCloud it is Pocket ID 2.14.0, the official image pinned by digest, as one container with an embedded SQLite database in the pocket_id_data volume. xCloud generates a 64-character encryption key, sets the public HTTPS URL and trusted-proxy handling, and gives you a first-time setup URL. Whoever opens /setup first becomes the administrator, so do it straight away.
From Sign-Up to a Live Pocket ID In Just 3 Easy Steps
A Pocket ID install normally means a container, a data volume, an encryption key, a domain and a certificate before the first passkey exists. This is the same result without assembling any of it.
Step 01
Sign Up
Create your xCloud account and pick Pocket ID from the OneClick catalog. Choose a domain and a server; the install form has no other fields to fill in.
Step 02
We Deploy It For You
One click. We start the official Pocket ID image pinned by digest, mount pocket_id_data for its SQLite database, generate the 64-character encryption key and publish the app over HTTPS.
Step 03
Create The Administrator
Open the first-time setup URL, not the main address, and create the first account. Register a passkey when prompted; that passkey is how you sign in from then on.
Everything Pocket ID Does, On Your Own Server
Pocket ID runs in full here: a passkey-only OpenID Connect provider with OIDC client management, on a server you control.
Passkey-Only Sign-In
Upstream supports passkey authentication only, so there are no passwords to store or reset. People sign in with Touch ID, Windows Hello, a security key or a phone.
OpenID Connect And OAuth 2.0
An OpenID Connect Certified and OAuth 2.0 provider, so any application that speaks OIDC can use it for single sign-on.
OIDC Client Management
Create each client under Settings, Admin, OIDC Clients and enter that application's exact HTTPS callback URL from the browser interface.
Embedded SQLite Database
One container with SQLite inside, so there is no separate database service to run, patch or secure beside the identity provider.
Generated Encryption Key
xCloud generates a stable 64-character key at install that protects stored identity data, kept in the environment with the install for your backups.
HTTPS For WebAuthn
Passkeys need a secure browser context, so setup cannot complete over plain HTTP. Your domain gets a certificate and the container port stays on localhost.
Everything You Need To Run Your Passkey SSO 24/7
Managed hosting for Pocket ID, so the server that keeps your sign-in online is not your problem.
- Pocket ID 2.14.0 deployed instantly
- Official image pinned by digest
- Passkey-only authentication
- Generated encryption key
- Free SSL certificate
- SQLite on a persistent volume
- Server backups and snapshots
- Choose your server region
- Unused balance refunded
What You Can Do With Pocket ID
Passkey SSO for self-hosted apps
Register each application as an OIDC client and let your team sign in to all of them with one passkey, instead of keeping a separate password for every tool you host.
Replace shared passwords with passkeys
Give each person their own passkey on Touch ID, Windows Hello, a security key or a phone, so nobody has to share or reset a password for a family or team service.
Manage OIDC clients in one place
Add, review and remove client applications from the browser interface, entering the exact callback URL of each, so the list of apps that trust your sign-in stays visible.
Keep identity data on your own server
Store accounts and passkey registrations in an SQLite database on a server you control, so a hosted identity vendor never holds the list of who uses your tools.
Pocket ID vs Alternatives
- Microsoft Entra ID
- Pocket ID is a provider you run yourself, with passkey-only sign-in and an embedded SQLite database, so accounts stay on your own server.
- Okta
- Pocket ID covers single sign-on for self-hosted apps through OpenID Connect and OAuth 2.0, without a separate vendor holding your user directory.
- Authelia
- Authelia has its own OneClick page. In a Pocket ID vs Authelia comparison, Pocket ID is passkey-only and acts as a certified OpenID Connect provider with its own client management interface.
- Keycloak
- Upstream's README names Keycloak as another self-hosted OIDC provider and calls such tools often too complex for simple use cases; Pocket ID aims to be the easier option.
Ready To Run Your Own Sign-In Provider?
Pocket ID on xCloud runs on a dedicated Cloud VPS that we provision, patch, monitor and restore. Your identity data stays on a server you control.
Fast Provisioning
Deploy faster using an xCloud Managed Server built with optimized stacks and high-speed SSDs.
Enterprise-grade security
Protect your infrastructure with a free SSL certificate and more advanced security features at no additional cost.
Intuitive Control Panel
From Server creation to application deployment, everything can be managed from our intuitive control panel.
Hear what people are saying about us
See why agencies, developers, startups, and growing businesses choose xCloud to power their projects.
xCloud works really well, I am surprised by its performance being this the release version, I have tried many paid platforms such as runcloud, cloudpages or serveravatar, as well as free platforms such as CyberPanel, CloudPanel or Hestia Control Panel and direct competitors such as SpinupWP and FlyWP. Of all those that I have tried, the platform that works best for WordPress is SpinupWP and I believe that xCloud can reach and surpass that development, its roadmap is promising. Congratulations to the xCloud team, I hope they become the leading platform in the segment, it has all the potential to achieve it!
Brian GeovannyI've been with runcloud for the last 3 years. However, after trying xcloud for the last month, I'm switching over. They are on a roll with their setup.
Kevin PinedaI'm moving my servers to xCloud, a cloud control panel by M Asif Rahman and the WPDeveloper team. Their roadmap looks interesting and no, there are no team mates nor API limits with xCloud! #xCloud #wordpress #hosting
Leo KooHow Cloud Nine Web Elevated Client Experience While Streamlining Hosting Operations using xCloud
Ed EllinghamxCloud is like having an expert server team on call — without the big agency costs. It's given me back my time and given my clients peace of mind. Highly recommended for freelancers and small teams who want reliable performance and security.
Dumitru ButucelxCloud isn't just a solution. It's like one of that friend who got your back when you screw things up pretty bad.
Waqar AhmedTrust me when I say, once people explore the potential of xCloud they gonna switch from other panels, just keep delivering the best tech, lots of love for the team 😍😍
Rahul SinghSo far my experience has been smooth like silk. I didn't imagine that configuring and managing a VPS would be so easy. As of today, I have deployed 8 sites. The support is good, and they treat users with respect, even if they ask stupid questions (myself included). For the future, I hope for greater flexibility in scheduled backups and more comprehensive and consistent documentation. I'm sure that within a few months, xCloud will become the leader in its segment. This community is amazing, and the Staff here is super helpful.
Massimo VillaCame from cloudways then to runcloud then to xcloud. Looks like I'm staying here.
Gerson ElI've recently taken all of my Vultr-hosted sites and gotten rid of cPanel for them to substitute it with xCloud. I have to say, I'm really impressed with xCloud so far! The interface is definitely the standout feature for me.
Tony LewisI came from Cloudways and won't go back. Highly impressed with xCloud. Glad I gave them a chance.
Jared McDowellI like xCloud better than RunCloud, but one thing I'll point out is that some years ago RunCloud was hungry for business, the support was outstanding, and the community was active and helped each other. Maybe it was sold, there was a change in management, or they stopped being hungry, but the quality of the RunCloud offering declined and it hasn't been moving forward quickly. My point is that currently the xCloud team has the edge and it is theirs to keep or lose
David McCanHow Kevin Heinrichs Cut Hosting Costs by 84% While Running WooCommerce & Node.js Sites Efficiently
Kevin HeinrichsI had 150 sites on cloudways and am in the process of moving them to xcloud. Much faster and better priced.
Dan SpinozaDear xCloud Team, I have been using xCloud for some time now and am genuinely impressed with its capabilities and the flexibility it offers by allowing users to bring their own VPS for management. It's a fantastic service, and my experience so far has been very positive. Successful migrated 5 sites on a single server. Xcloud migration tool worked great. There were few hiccups with security plugin like MalCare but disabling the plugin prior to migration worked just fine.
Rahil MaknojiaCame from runcloud. Tried xcloud and never came back.
Karl FanegaHow Advanced Web Strategies Saved Over $2,000 & Recovered 56 Hours per Month Managing 70+ Client Websites
Gary MoodyxCloud gave me what no other hosting platform could: the flexibility of a VPS with the convenience of managed WordPress. As a solo founder running an entire business on one server, that combination is an important unfair advantage.
Jorge de los Reyes MartínezI use Server Avatar and xCloud and I'll sooner use xCloud than Server Avatar personally.
Jay PaganoHow Newman Web Solutions Ensured Perfect Uptime and Seamless Scaling For 120+ WordPress Sites with xCloud
Lori NewmanI too have moved over to xCloud. It's pretty sweet. One click n8n and uptime Kuma apps
John ApertureI went from Cloudways to xCloud. No intention on switching in the foreseeable future.
Blaine MooreFrequently Asked Questions
Feel free to contact us with any questions or concerns you may have.
How much RAM does Pocket ID need?
The template floor is 512 MB of RAM, 1 CPU core and 2 GB of disk for a small install. Pocket ID is one container with embedded SQLite, so the 6 GB plan is far above it; users, OIDC clients and traffic raise actual needs.
Can you self-host Pocket ID with Docker?
Yes. This template covers pocket id docker hosting end to end: the official image pinned by digest, the pocket_id_data volume, a generated encryption key, trusted-proxy settings and HTTPS, with no extra database container.
Does Pocket ID support passwords?
No. Upstream says it only supports passkey authentication, so there are no passwords. You register a passkey, such as Touch ID, Windows Hello, a security key or a phone, when you create the first administrator.
Why does Pocket ID need HTTPS?
Passkeys use WebAuthn, which browsers allow only in a secure context. First-administrator setup therefore cannot be completed over ordinary remote HTTP. xCloud serves your domain over HTTPS with a certificate, so the setup page works.
How do I create the first Pocket ID administrator?
Open the first-time setup URL from your credentials, create the account and register a passkey. Do this at once: until the first account exists, anyone who opens /setup can claim the administrator account.
Is Pocket ID better than Keycloak or Authelia?
Upstream calls Keycloak and ORY Hydra often too complex for simple use cases, and positions Pocket ID as the easier choice. It is passkey-only, so it suits teams that want no passwords, not every identity need.
Is Pocket ID open source?
Yes. Pocket ID is BSD-2-Clause licensed, so the code itself costs nothing. The Cloud VPS is your only bill, and this Pocket ID cloud install keeps every account and passkey registration on a server you control.
How do I back up Pocket ID?
Back up the whole pocket_id_data volume, which holds the SQLite database, encrypted keys and configuration, and keep the encryption key with it. A database copy without the matching key may be unusable. Test a restore.
How do I upgrade Pocket ID?
This install holds on its pinned 2.14.0 image until you move to a newer template version. Before that, copy the volume and key, then read the release and migration notes, because major versions can change data irreversibly.
Can I cancel anytime?
Yes. There is no lock-in — cancel any time. Hosting is billed monthly and charged for what you actually use, so when you delete the server the unused balance is refunded to your account, less up to 10% in payment-processing fees.
More Security & Identity apps in one click
Browse all Security & Identity apps →Browse all one-click apps →2FAuthA single-user 2FA and TOTP manager that stores your authenticator secrets so you can generate codes from a browser, not a phone.
AliasVaultSelf-hosted, end-to-end encrypted password and email alias manager with passkey support, browser extensions and mobile apps, running as a single container with a generated admin password.
AnubisProof-of-work browser challenge reverse proxy that sits in front of your website and filters automated clients before traffic reaches your origin.
AutheliaSelf-hosted 2FA and single sign-on portal that guards your apps with one login, deny-by-default rules and brute-force protection.
AuthorizerOpen-source authentication and authorization server with a login UI, OAuth 2.0 and OpenID Connect APIs, MFA and webhooks, running as one container with SQLite.
AuthPortalSingle sign-on and OIDC provider that signs users in with their Plex, Jellyfin or Emby account, with optional MFA, an admin console and LDAP sync.
BlockyFast, lightweight DNS proxy and ad blocker that blocks ads, trackers and malicious domains for every device, with a private DNS-over-HTTPS endpoint on your own domain.
BunkerWebOpen-source web application firewall and reverse proxy built on NGINX, with ModSecurity, the OWASP Core Rule Set and a web UI.
Cap CaptchaA self-hosted, privacy-friendly proof-of-work CAPTCHA with a dashboard, per-site keys and a siteverify API.
Ready To Add Passkey Login To Your Apps?
Connect your first server in minutes and create your administrator passkey.