I recently built something I thought might help with privacy.
It’s called Oxidiko: a serverless, privacy-first login system that removes passwords and lets users control what data (if any) they share.
I made it because I got tired of the usual email/password leaks and centralized auth flows where you’re forced to trust whoever runs the server.
The idea is:
- no passwords to leak → users get a unique `oxidiko_id` derived from a passkey and optional fallback PIN
- no centralized vault of emails or creds to hack
- smaller attack surface → data stays local, nothing stored on my side
- websites just verify a signed JWT with a public key → no secrets in transit
It’s all open source, and I’d really appreciate feedback — especially criticism or suggestions.
Links if you’re curious:
- Docs: [https://oxidiko.com/docs](https://oxidiko.com/docs)
- GitHub: [https://github.com/Oxidiko/Oxidko](https://github.com/Oxidiko/Oxidko)
- Telegram: [https://t.me/oxidiko](https://t.me/oxidiko)