\n
Sovereign access · decentralized everywhere

Your identity.
Your keys.
Your control.

ANKH is a passkey-first identity layer built around open standards, phishing-resistant authentication and recovery designed not to turn a weaker channel into a universal master key.

WebAuthn / FIDO2 · OpenID Connect · Threshold recovery

ANKH

SOVEREIGN ACCESS
DECENTRALIZED EVERYWHERE

Primary authenticationPasskey-first
User verificationRequired
FederationOpenID Connect
RecoveryThreshold-based
AuthenticationWebAuthn / FIDO2
FederationOIDC + PKCE
Private keyStays with authenticator
ArchitectureOpen standards first
Security architecture

Strong by default. Precise by design.

Authentication strength, step-up and recovery are treated as one policy surface. ANKH keeps public claims tied to mechanisms that can be verified in the implementation.

Passkey first

Discoverable WebAuthn credentials with user verification required. Private WebAuthn key material remains inside the authenticator.

Standards-native federation

Applications integrate through OpenID Connect and Authorization Code with PKCE instead of a proprietary login protocol.

Recovery without silent downgrade

Threshold recovery, durable state and audit controls are designed so a weaker recovery path does not quietly replace the normal passkey path.

Sovereign architecture

One identity layer. Many relying parties.

ANKH does not pretend that every website shares one universal WebAuthn credential. Each credential remains scoped to its relying party while the identity and federation layer provides a consistent account relationship.

Gold represents identity and user sovereignty. Petrol marks network, protocol and infrastructure surfaces.

DeviceAuthenticator
☥ ANKHIdentity layer
ApplicationOIDC client
Open standards transportWebAuthn · FIDO2 · OpenID Connect · PKCE
Interoperable foundation

Built on standards the ecosystem already understands.

ANKH uses established protocols rather than inventing proprietary cryptography for web authentication or application federation.

WebAuthnFIDO2PasskeysOpenID ConnectOAuth 2.1 / PKCEJWKSThreshold recovery
ANKH Key

A physical authenticator for the same ANKH identity.

The planned hardware product belongs to the same identity platform. Enrollment, replacement, revocation, firmware policy and certification claims remain gated by production evidence.

Explore ANKH Key
Developers & integrations

Use the protocol surface, not another identity silo.

Integrate through OIDC discovery and PKCE, with adapters for application stacks where useful. The adapters remain thin over the same identity control plane.

ANKH application

Your ANKH starts with a passkey.

Open the application to create or access your identity and manage the ANKH layer linked to it.

Open ANKH app →