passlock.dev

What Is It

Passlock is an authentication service for web applications, focused on Passkeys and “frictionless, multi-factor authentication.” Based on the content, it already supports passkey registration and authentication, as well as one-time verification codes that can be used for common identity scenarios such as email verification and account recovery. The product also provides an online demo, with the API endpoint at https://api.passlock.dev, making it suitable for developers who want to experiment quickly.

Core Capabilities and Developer Experience

In terms of framework support, Passlock explicitly mentions SvelteKit, Next.js, and Express, and says its browser library is framework agnostic, requiring only a modern bundler. On the backend, in addition to its TypeScript library, it also supports integration from any backend capable of making REST calls, so the language-stack restrictions are not strong. Documentation entry points include Getting started, registering/authenticating/deleting passkeys, LLM Coding Agents, LLMs.txt, and more, giving it a fairly clear onboarding path. It also mentions that coding agents such as Codex and Claude can assist with development, which makes it somewhat friendly to AI-assisted programming workflows.

Pricing and Deployment

Passlock cloud is currently free for both personal and commercial projects, which is a clear value advantage. However, the content does not specify free-tier limits, rate limits, SLA, enterprise support, or future pricing plans. In terms of deployment, there is currently no self-hosted version available; the official explanation is that cloud is being launched first. The current hosting region is AWS eu-west-1, i.e. Ireland, with more regions planned.

Pros and Cons

Its advantages are a simple integration model, frontend framework independence, and backend compatibility with various tech stacks via REST. It also explicitly opposes vendor lock-in and provides GitHub discussions as a support channel. The drawbacks are also clear: no self-hosting, limited cloud regions, and features such as social login, SMS codes, audits, and better DX are still on the roadmap. Details around security compliance, audit logs, enterprise-grade support, and related areas are also insufficient in the available content.

Who It’s For and Access from China

Passlock is suitable for teams that want to quickly add Passkeys login to early-stage products, SaaS apps, internal tools, or modern web applications, especially users of SvelteKit, Next.js, and Express. If you have strict requirements around data residency, self-hosting, compliance audits, or low-latency access from mainland China, it should be evaluated carefully. The content does not provide information on mainland China network availability, payment methods, or localization, so access from China is unknown. Alternatives to compare include Auth0, Clerk, Firebase Authentication, Supabase Auth, Stytch, WorkOS AuthKit, and others.