Paramira Sign in without a password
How paramira.org's accounts work, and why they are a tool you can take.
Live
Accounts and wallet sign-in
Accounts by email with no password, and sign-in with an identity wallet on your phone, on your own identity provider.
- For
- organisations that want accounts without passwords or a big-tech login
- Built on
- Authentik, Credo, OpenID Connect, OpenID4VC, SD-JWT
- Your data
- email, username, name; a wallet link if you add one
- Licence
- MIT (building blocks), AGPL-3.0-or-later (onboarding)
- Code
- codeberg.org/phuman/paramira-web
What it is
A set of packages that give an organisation accounts the way paramira.org has them: sign up by email, sign in with a link instead of a password, and, if you want, add an identity wallet on your phone and sign in by scanning a code.
The vision
An organisation shouldn't need Google, Facebook or a password database to know its members. Email always works; a wallet is a choice, never a requirement. An account here is with the organisation only: it is never linked to anyone's identity in a community app.
Using it
Sign up with your email (by invitation for now); the link we send confirms it.
Sign in with a link by email; no password.
Add a wallet (Paradym on Android or iOS) from your profile: scan the code and accept the card.
Sign in with the wallet: scan the code, agree to share the card.
Unlink the wallet any time from your profile.
How it's built
Package | What it does |
|---|---|
| The identity provider's flows, pages and emails, as files |
| A typed client for the identity provider |
| Issues the account card to a wallet and checks it at sign-in (Credo) |
| Makes wallet sign-in look like any OpenID Connect sign-in |
| Links a wallet to an account, and unlinks it |
| A site's sign-in, with no tokens in the browser |
| The welcome, wallet and profile pages |
Open standards throughout: OpenID Connect, OpenID4VCI and OpenID4VP, SD-JWT. No hosted service in the middle.
Run it yourself
The code is public on Codeberg, with a local stack that runs everything (identity provider, wallet bridge, mail) on one machine. The packages are being reviewed before their first release.
Get help
We can set it up for your organisation, for a minimum donation.
Where paramira.org uses it
It is this site's sign-in. Every account on paramira.org was made with it.