The elite WebAuthn and Passkey infrastructure for modern applications. Seamlessly integrate secure biometrics with zero PII overhead.
Enterprise identity providers charge exorbitant rates for baseline security features like WebAuthn. MeshAuth democratizes passkeys.
A simple 3-step architecture integrating device biometrics directly with your application.
User generates a public-private keypair on their device via FaceID, TouchID, or Windows Hello. Private key never leaves the secure enclave.
When authenticating, the MeshAuth server sends a cryptographic challenge to the client device.
The device signs the challenge with the private key. MeshAuth verifies the signature using the stored public key.
Simple, well-typed SDKs for every major framework and language.
import { createPasskey } from '@meshauth/client';
async function registerUser(username: string) {
// 1. Get creation options from your server
const options = await fetch('/api/auth/register-options');
// 2. Trigger biometric prompt
const credential = await createPasskey(options);
// 3. Send public key to server
await fetch('/api/auth/register', {
method: 'POST',
body: JSON.stringify(credential)
});
}Everything you need for secure, scalable identity management.
Built on WebAuthn and CTAP protocols, strictly adhering to W3C standards for maximum compatibility.
Native support for Apple FaceID, TouchID, Windows Hello, and Android Biometrics.
MeshAuth only stores public keys. No passwords, no personal data, minimizing your compliance scope.
Issue secure, signed JSON Web Tokens immediately upon successful biometric assertion.
Leverage Apple, Google, and Microsoft passkey ecosystems for seamless cross-device synchronization.
Validate assertions on the edge or in air-gapped environments with pure cryptographic checks.
MeshAuth stands out as the premier free Auth0 alternative for passkey and WebAuthn authentication. Unlike legacy identity providers that lock modern security features like biometric authentication behind expensive enterprise tiers (often costing upwards of $18,000/year), MeshAuth provides a self-hosted, BSL-licensed core that is completely free to use. It offers a superior developer experience with zero vendor lock-in, making it the most cost-effective and secure choice for modern applications seeking phishing-resistant authentication.
BSL 1.1 Licensed. Free for most, reasonable for scale.