Show HN: I built an open-source and serverless authentication system

5 points

a year ago

I built Oxidiko because I was tired of seeing companies lose millions of passwords to sloppy authentication systems that were never designed for privacy or modern threats. I’m Jonathan, a 17-year-old developer and security enthusiast, and I wanted to create a simpler, more secure, and privacy-first way to log in.

Oxidiko reduces the attack surface by eliminating central password storage, encrypting all vault data locally, and making the user’s identity portable — so even if your server is breached, there’s nothing meaningful to steal.

It uses WebAuthn (passkeys) combined with a PIN fallback to generate a unique oxidiko_id — like a passport you actually have to prove you own. The vault is encrypted with keys derived from both, and either can unlock it securely.

No more giant plaintext databases, no more vendor lock-in. Just fast, open-source, zero-knowledge authentication that puts users back in control.

(Docs)[https://www.oxidiko.com/docs] (Github)[https://github.com/Oxidiko/Oxidiko] (Link)[https://www.oxidiko.com] (Demo)[https://github.com/Oxidiko/Oxidiko/blob/main/video/oxidiko_d...]