Pocket ID
Pocket ID is an OpenID Connect provider that signs people in with passkeys only. Passkeys need a stable HTTPS origin, so this template runs it on HTTPS with the APP_URL and encryption key you supply.
Pocket ID hosting on Varity costs $14.80 a month at most, with a 5 GB volume included. No request, ingress or egress fees.
What you get
Deploying the template sets up every part below in your account, on its own HTTPS address
Services & storage
2 partsPocket IDAuth1 vCPU · 2 GB RAM
- 5 GB volumeMounted in your appKept across restarts and redeploys
Why run Pocket ID on Varity
The HTTPS origin passkeys need
Passkeys are tied to your APP_URL. The app is served on HTTPS, so registration works from the first /setup visit.
Users and keys persist
Pocket ID's data lives on a 5 GB persistent volume, included in the $14.80 monthly maximum
Open source
The BSD-2-Clause Pocket ID project, configured with its own documentation
What Pocket ID runs on
| Included | Monthly max |
|---|---|
| Pocket ID appGrowth plan: 1 vCPU · 2 GB RAM · 5 GB temporary storage | $14 |
| App storage5 GB persistent volume, kept across restarts | $0.80 |
| Monthly maximum | $14.80 |
- Best for
- Adding passkey-based OIDC authentication to internal tools and self-hosted services
- Billing
- By the running minute, never above the maximum
- Traffic
- No app traffic fees
- Category
- Security
- Built with
- Go
Set up Pocket ID
- 01
In the Portal, choose Pocket ID from Templates and add these settings:
- APP_URL
- The HTTPS address where you will open this app, including https://
- ENCRYPTION_KEY
- Pocket ID's encryption key. Generate it with openssl rand -base64 32 and keep a secure copy.
- 02
Open /setup at your HTTPS app address to create the administrator account and register its first passkey
- 03
Add an OIDC client for the app you want to connect
Pocket ID hosting questions
- How much does it cost to host Pocket ID?
- $14.80 a month at most on Varity, including 5 GB of persistent storage, billed by the running minute.
- What do APP_URL and ENCRYPTION_KEY do?
- APP_URL is the HTTPS address users open, which passkeys are bound to. ENCRYPTION_KEY encrypts Pocket ID's sensitive data; generate it with openssl rand -base64 32 and keep a copy.
- How do I connect an app to Pocket ID?
- Create an OIDC client in Pocket ID, then give your app the client ID, secret and your Pocket ID address as the issuer.
Keep browsing
More apps to run
VaultwardenLightweight Bitwarden-compatible password manager for teams and foundersSecurity$14.32/mo max
GiteaLightweight private Git service for repositories, issues, and team code reviewDeveloper tools$29.60/mo max
ForgejoSelf-hosted Git forge for repositories, issues, packages, and code reviewDeveloper tools$29.60/mo max