DarkAuth is an open-source, self-hosted authentication solution featuring the OPAQUE protocol for password security. Designed for absolute privacy, it ensures passwords remain unknown to servers while supporting OIDC compatibility for seamless integration. With features like TOTP MFA, email password reset, and secure key storage, it provides a robust framework for secure authentication.
DarkAuth offers a robust zero-knowledge authentication system that is fully compatible with OpenID Connect (OIDC). By leveraging the OPAQUE protocol (RFC 9380), DarkAuth ensures that user passwords remain entirely secure, as they are never transmitted to the server. It also features optional zero-knowledge delivery of Data Root Keys (DRK) directly to trusted clients.
config.yaml file required for initial setup.For a fast way to deploy DarkAuth, run it using Docker:
docker run -d -p 9080:9080 -p 9081:9081 ghcr.io/puzed/darkauth:latest
Visit http://localhost:9081 to complete the installation process.
DarkAuth is designed with developers in mind. It supports a development mode with hot reloading and easy access to its components. The system is structured in a modular monorepo that includes API services, user and admin interfaces, and testing suites. The various endpoints and configurations allow for flexibility in setup and usage, accommodating both integrated and standalone database configurations.
To maintain the integrity and confidentiality of user data, DarkAuth enforces essential security practices, such as:
DarkAuth stands out as a leading solution for organizations requiring a zero-knowledge authentication system. Its blend of security, flexibility, and open-source accessibility makes it a compelling choice for developers and system administrators alike, ensuring that passwords remain secure and user data is protected.
No comments yet.
Sign in to be the first to comment.