Guide

⠕ triauth is how web authentication should have always worked.

It lets you sign in to websites with an identifier like john@example.com and no password. Your domain lists the devices that belong to you. When a website asks you to sign in, you approve it in your web browser, and the website checks with your domain that the device is yours.

Set up your identitySet up your browser, publish domain records, and sign in without passwords.Add triauth to your appTwo calls to a library. No passwords to protect, no identity server to run.Roll it out to your teamGive everyone an identifier at your domain. Remove access by deleting a DNS record.

Start with the basics

• How it works explains a sign-in step by step.
• Why triauth compares it with passwords, passkeys, and single sign-on providers.
• FAQ answers the popular questions.

Go deeper

• Protocol contains an overview of the protocol and supported DNS records.
• Where can I use it? lists libraries, frameworks, and apps that support triauth.