> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hyperauth.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Introduction

> HyperAuth is open-source passkey identity infrastructure for modern web apps — self-host the Vault Worker, audit every line, and ship without passwords.

HyperAuth is an open source identity platform built on a single core principle: crypto logic belongs close to the data. Every cryptographic operation runs inside SQLite custom functions within a Go WASM plugin, deployed as a Cloudflare Worker that you can run on your own account. Your application gets a thin TypeScript SDK on top — no servers to manage, no keys to custody, no vendor lock-in.

Users sign in with a passkey, receive a portable identifier they fully own, and can attach smart accounts, delegate capabilities, and sync across devices — all without passwords, password resets, or a third party holding their session. Every package, every contract, every WASM module is open source under permissive licenses.

## Capabilities

<CardGroup cols={2}>
  <Card title="Passkey authentication" icon="fingerprint">
    WebAuthn-based registration and sign-in. No passwords, no shared secrets.
  </Card>

  <Card title="Portable identifiers (DIDs)" icon="id-card">
    W3C-compliant identifiers anchored to the user's passkey keypair.
  </Card>

  <Card title="ERC-4337 smart accounts" icon="wallet">
    Gasless on-chain accounts linked to the user's DID.
  </Card>

  <Card title="UCAN authorization" icon="key">
    Capability-based delegation without a permission server.
  </Card>

  <Card title="Device sync" icon="arrows-rotate">
    Deterministic key derivation enables seamless multi-device identity.
  </Card>

  <Card title="Encrypted vault" icon="lock">
    Client-side encrypted storage, decryptable only by the identity holder.
  </Card>
</CardGroup>

## Why HyperAuth

<CardGroup cols={3}>
  <Card title="Open source" icon="code-branch">
    Every layer — SDK, hooks, smart contracts, WASM enclave, vault worker — is open source and auditable.
  </Card>

  <Card title="Self-hostable" icon="server">
    Deploy the worker on your own Cloudflare account. No SaaS dependency, no per-MAU billing.
  </Card>

  <Card title="No custody" icon="shield-halved">
    Keys never leave the user's device. We can't lose or leak what we never hold.
  </Card>
</CardGroup>

## Install

```sh theme={null}
npm install @hyperauth/sdk @hyperauth/react
```

Three packages are available depending on what your application needs:

| Package            | Purpose                                                 |
| ------------------ | ------------------------------------------------------- |
| `@hyperauth/sdk`   | Core client SDK — crypto, vault, registration, ERC-4337 |
| `@hyperauth/react` | React 19 hooks and provider                             |
| `@hyperauth/ui`    | Shared component library (shadcn/ui)                    |

## Where to start

<CardGroup cols={2}>
  <Card title="Quickstart" icon="rocket" href="/quickstart">
    Add passkey sign-in to an existing app in minutes.
  </Card>

  <Card title="Register an identity" icon="user-plus" href="/tutorials/register-identity">
    Walk through the full 12-phase registration flow.
  </Card>

  <Card title="Sign and verify" icon="signature" href="/tutorials/sign-and-verify">
    Produce and verify a UCAN-signed payload.
  </Card>

  <Card title="Architecture" icon="diagram-project" href="/concepts/architecture">
    Why HyperAuth is built the way it is.
  </Card>
</CardGroup>

## SDK guides

Task-oriented instructions for common integration scenarios.

<CardGroup cols={2}>
  <Card title="Authentication" icon="fingerprint" href="/guides/authentication">
    Handle sign-in, session management, and device re-auth.
  </Card>

  <Card title="Smart accounts" icon="wallet" href="/guides/smart-accounts">
    Create and use ERC-4337 accounts from a DID.
  </Card>

  <Card title="UCAN delegation" icon="key" href="/guides/ucan-delegation">
    Issue and validate capability tokens.
  </Card>

  <Card title="Vault management" icon="vault" href="/guides/vault-management">
    Read, write, and rotate encrypted vault entries.
  </Card>

  <Card title="Device sync" icon="arrows-rotate" href="/guides/device-sync">
    Link a new device to an existing identity.
  </Card>

  <Card title="Payments" icon="credit-card" href="/guides/payments">
    Send gasless transactions via the smart account.
  </Card>

  <Card title="Alias lookup" icon="magnifying-glass" href="/guides/alias-lookup">
    Resolve human-readable aliases to DIDs.
  </Card>

  <Card title="Deploy" icon="cloud-arrow-up" href="/guides/deploy">
    Deploy the HyperAuth Worker to your own Cloudflare account.
  </Card>
</CardGroup>