Ezkey

Open-source MFA for developers — self-hosted, pragmatic, in active development

Cryptographic MFA with a clear chain: your backend, your devices. Simple, secure, and self-hosted Multi-Factor Authentication that just works.

🚀

Developer First

Simple REST APIs, comprehensive docs, and backend-first integration — mobile in the chain

🔒

Sovereign

Cryptographic MFA on your infrastructure — your backend stays the source of truth; the app completes the chain

🛡️

Security

Cryptographic continuity from enrollment through authentication — explicit trust boundaries, not browser mediation

📱

Mobile Ready

Cross-platform React Native app with QR enrollment

Ezkey started as a backend-first answer to a real frustration with browser-centric strong authentication. It is an opinionated, AI-first project exploring a pragmatic middle ground: stronger than passwords and classic TOTP, hopefully simpler to operate from this project's point of view than the full WebAuthn ceremony, and explicit about its trade-offs. Read why Ezkey exists.

Evaluate Run locally

Clone-and-run instructions ship with the public repository (planned). Until then, read how evaluation works today — including the technology preview path.

Source code & evaluation Proof Documentation

Canonical technical docs live in the repository. The repo is private for now; this page explains what is available on ezkey.org in the meantime.

Source code & evaluation Diligence Trust & security

What Ezkey claims, what it does not claim, how to report issues, and links to deeper technical material.

Read the trust page