Managed Pocket ID hosting
Passkey sign in for all your self-hosted apps, through one simple OpenID Connect provider
- Live in minutes
- Daily backups, one-click restore
- SFTP access, no lock-in
- from US$1.10/mo in Poland
Pocket IDWhat you're getting
Pocket ID is a small OpenID Connect provider that signs people in with passkeys instead of passwords. Add your apps as OIDC clients, and everyone signs in to all of them with the passkey on their phone, laptop or security key. Many self-hosted apps support OpenID Connect, including Immich, Paperless-ngx, Vikunja, Open WebUI and Forgejo, and so do reverse proxies and tools that put a login in front of an app.
You manage users and groups, decide which groups may use which apps, invite people with sign up links and see every sign in in the audit log. Pocket ID supports PKCE, refresh tokens and back-channel logout, can sync users from LDAP, and has an admin API for scripts. Email login codes and sign in links work once you add your own SMTP server in the app.
On CoreHost, Pocket ID runs the official release with HTTPS on a stable address, which passkeys need. The admin account is created before the app first answers, so the public setup page can never be claimed by someone else. It is hosted in Sydney or Poland, with daily backups, SFTP access to the data folder and updates handled for you; encrypted backups are stored in the EU. It runs comfortably on the Lite plan.
Pocket ID is an independent open source project released under the BSD-2-Clause licence. CoreHost is an independent hosting service, runs the official release and is not affiliated with the Pocket ID project. Pocket ID website, Pocket ID on GitHub.
On CoreHost
- Passkey sign in for every app that supports OpenID Connect
- Users, groups, per-app access rules, sign up links and an audit log
- LDAP sync and an admin API for automation
- Locked from the first start: the admin account exists before the app opens
- A stable HTTPS address for your passkeys, or your own domain
- Hosted in Sydney or Poland, with daily backups; encrypted backups are stored in the EU
Included with every appStandard, not add-ons
Daily backups, one-click restore
Every instance is backed up daily. Restore any snapshot yourself from the panel. No support ticket, no fee.
SFTP file access
Direct SFTP access to your app's data folders. Your files are never locked away from you.
Custom domain + auto TLS
Bring your own domain with a CNAME and a TXT verification record. Certificates are issued and renewed automatically.
AI + human support
A 24/7 AI engineer that can actually inspect and fix your app, with a human escalation path. App-level help included.
Automatic updates with rollback
Each update is tested on a copy and backed up first, and rolled back automatically if the app fails its checks.
Per-app firewall
Restrict access to the IP addresses you choose, with an Add my IP button. Off by default.
Backups to your own S3
Add encrypted, incremental backups to your own S3-compatible storage on top of the daily ones we include.
Resize any time
Move up or down a tier from the panel. Your balance is drawn by the hour, so you pay the new rate from the change.
RegionsWhere Pocket ID runs
Pocket ID can be deployed in Sydney, the US and Poland. Pick the region closest to the people who use it. Daily backups are encrypted and stored in the EU.
- Sydneyfrom US$1.50/moClosest to Australia and New Zealand.
- The USfrom US$1.50/moClosest to the Americas.
- Polandfrom US$1.10/moLowest price, 25% less than the other regions.
Moving to CoreHostMove your existing Pocket ID here
Already running Pocket ID on PikaPods, a VPS or your own server? You can bring your data with you. Deploy the app here first, then follow the route below, and keep your old app until you are happy.
Tell us what you are moving
Passkeys only work on the address they were created for, so a fresh start with people registering their passkeys again is usually simplest. To bring users and clients across, open a ticket.
Ways to move it
- Do it yourself. Deploy Pocket ID, let it start once, then use the steps on this page, with SFTP and the file manager in the Files tab. A backup taken first gives you a clean point to go back to.
- Ask us to move it. Open a ticket from your control panel with the app and where it runs now. Support will tell you what can be moved and help you do it, and nobody touches your old app.
Coming from PikaPods? Switch on SFTP in the pod's settings, stop the pod and copy its files; PikaPods documents this as its manual backup for migrations.
DeployPick a size and a region
1. Plan (Pocket ID needs Lite or larger to run well)
Prices exclude GST/VAT where applicable. Drawn hourly from your prepaid balance, cancel any time.
Lite
- 1 vCPU
- 1 GB RAM
- 5 GB NVMe
Lightweight tools: bookmarks, feeds, uptime checks, password vaults.
Standard
- 1 vCPU
- 2 GB RAM
- 10 GB NVMe
The right fit for most apps: automation, wikis, databases.
Power
- 2 vCPU
- 4 GB RAM
- 20 GB NVMe
Busy teams and heavier workloads with room to breathe.
Scale
- 3 vCPU
- 8 GB RAM
- 40 GB NVMe
The most demanding apps in the catalog, at full stride.
2. Region
…Australia
$2.30/mo
…United States
$2.30/mo
…Poland
$1.70/moBest value, save 25%
You will be asked to sign in (or create a free account) before your app provisions. Your $5 starting credit covers the first stretch; we only ask for a card when it runs low.
QuestionsAbout hosted Pocket ID
Platform-wide questions (domains, backups, email, updates) live on the main FAQ.
Built Pocket ID, or help maintain it? If you opt in, part of what it earns here can go to you. See the open-source developer revenue share.