Locke Gateway

Spec sheet

Abuse controls

The hosted instance includes per-IP and per-RP rate limiting, request timeouts, and maximum payload enforcement.Read 11 Oct 2026 · lockeidentity.com

Credential export

After verifying domain ownership with a DNS TXT record, customers can export public keys, credential IDs, sign counts, and user handles for their domain.Read 11 Oct 2026 · lockeidentity.com

Domain isolation

Credentials are scoped by RP ID, and Gateway validates domains from the HTTP origin without requiring registration or API keys.Read 11 Oct 2026 · lockeidentity.com

Encrypted storage

Gateway includes a server-backed key-value vault encrypted in the browser with AES-256-GCM using a key derived through the WebAuthn PRF extension.Read 11 Oct 2026 · lockeidentity.com

Framework support

The page lists client SDKs for React, Vue, Angular, Svelte, SolidJS, and Vanilla JS, plus server bindings for frameworks including Express, Fastify, Django, Spring Boot, and ASP.NET Core.Read 11 Oct 2026 · lockeidentity.com

Migration limit

Exported credentials can be imported into a WebAuthn-compliant relying party, while users keep their passkeys but not their Gateway sessions when migrating away.Read 11 Oct 2026 · lockeidentity.com

No server setup

A frontend can use Gateway by setting the open-passkey SDK provider to "locke-gateway" and supplying an RP ID.Read 11 Oct 2026 · lockeidentity.com

Open-source library

Gateway is built on open-passkey, which the page describes as an open-source passkey library with six core language implementations.Read 11 Oct 2026 · lockeidentity.com

Passkey authentication

Gateway provides WebAuthn registration, authentication, session management, and instant session revocation.Read 11 Oct 2026 · lockeidentity.com

Post-quantum readiness

The page describes ML-DSA-65-ES256 hybrid signatures, with ES256 used today and automatic upgrade planned when browsers support post-quantum WebAuthn.Read 11 Oct 2026 · lockeidentity.com

Self-hosting

The SDK can switch to a self-hosted backend using baseUrl, and the page estimates self-hosting at about $14/month on AWS with Postgres and Redis.Read 11 Oct 2026 · lockeidentity.com

Plans and prices

Every Locke Gateway plan and price →

Where Specifiction places it

• Passkey Authentication Software#33 of 557.5