Safer

By eliminating the password you are eliminating the number one seucrity hole - user error and their insecure passwords. The authcode is generated uniquely every time and expires after a short period of time.

Secure

Handshake uses the proven cryptographic standard PBKDF2 for security. Emails and authcodes are passed over SSL, and application salts are doubly encrypted in the datastore.

Easy to Implement

You can add Handshake.js to your website in very few lines of code. In addition, it eliminates all the effort you'd normally do coding signup, login, and forgot passwords forms.

Open Source

The entire framework is open sourced. You can adjust the code to your own needs. You can self-host the API portion of it, further increasing your security.

There are multiple parts that make up the Handshake.js ecosystem.

The main part is Handshake.js. This library integrates with your application's form fields and talks to the API to generate the authcodes for logging in.

The API is hosted by me at no cost to you. You can self-host it if you wish. There's additional configuration available to you if you do so.

I recommend starting with the freely hosted version and then host your own when ready. Finally, there are the libraries which help ease integration into the language/framework of your choice.

Outline of the ecosystem:

• Handshake.js
• API
• Libraries
  • Ruby
  • Node.js