Project ANKH
ANKH is a sovereign-access project built to make strong, standards-based identity usable without turning one provider into the owner of the user's credentials.
What ANKH is
A passkey-first identity and federation layer based on WebAuthn/FIDO and OpenID Connect. The product keeps authentication, recovery and application federation inside one explicit security model.
Design principles
- User-controlled authenticators rather than reusable passwords.
- Open protocols instead of a proprietary application login protocol.
- Recovery treated as part of the security boundary rather than a weak universal fallback.
- Clear separation between public information, application/account operations and central identity ownership.
Domain architecture
myankh.com is the global public site. myankh.it is the authoritative Italian donor/editor and localized public surface. ankhy.app is the application, account surface, WebAuthn relying-party origin and canonical OIDC issuer. ankhy.one is a defensive brand domain that redirects to myankh.com.
One identity system
The domain separation is functional, not a duplication of accounts. Public and donor surfaces do not become parallel identity stores or additional WebAuthn relying parties.