Zero-trust authentication for modern web applications
Cipher Auth is a developer-first authentication SDK that brings zero-trust security principles to web applications of any scale. It supports WebAuthn biometrics, hardware security keys, and traditional credential flows.
The SDK handles the full OAuth 2.0 and OIDC lifecycle — authorization code flow, PKCE, token rotation, and silent refresh — with a clean, framework-agnostic API that integrates in minutes.
Security-first design means tokens are never stored in localStorage, refresh tokens are rotated on every use, and all cryptographic operations use the Web Crypto API.
Abstracting WebAuthn's complex ceremony flow into a simple two-method API
Ensuring token refresh is race-condition-free across multiple browser tabs
Keeping the bundle under 15KB while supporting 8 authentication methods