Passwords are the weak link.
Replace them in one line.
Add passwordless, phishing-proof sign-in to any website with a single script tag. Your users approve with Face ID, a fingerprint, or their device passkey — nothing to type, leak, or reset.
Paste it inside <head>. gate mode hides the page and sends
signed-out visitors to your hosted sign-in screen. Your data-site ID is on your
dashboard after you create a site.
Three steps. Zero passwords.
Your visitors confirm who they are with the device already in their hand. No passwords to forget, phish, or reset.
Add the guard tag
Drop one script tag into your page. No backend changes, no SDK to wire up, no user database to migrate.
Visitors approve on-device
Signed-out visitors land on your hosted sign-in screen and confirm with Face ID, a fingerprint, or a passkey.
They're in — instantly
Once approved, the page unlocks. Identity is verified by real device hardware, not a shared secret.
Everything you need to kill the password
Built on the WebAuthn standard — real device hardware, not SMS codes or magic links.
Hardware-bound keys
Credentials live in the device's secure enclave. They can't be phished, leaked in a breach, or reused elsewhere.
One-tag integration
A single guard.js script tag protects a page. Works with any stack — PHP, Node, Rails, WordPress, static HTML.
Phone or desktop
Approve on the same device or hand off to a phone. Whatever your visitor is holding, the passkey flow just works.
Manage every site
Create sites, grab integration snippets, and rotate keys from one dashboard. See who signed in and when.
Multi-site ready
One account, many properties. Add as many sites as you run and manage them all from a single place.
Sign-in history
A clear audit trail of authentication events per site, so you always know what happened and when.
Literally one tag
Add the guard to your page <head> with your site ID. That's the whole integration — copy it below.
Swap YOUR_SITE_ID for the ID shown on your dashboard.
Use data-mode="vault" instead to reveal protected content only after sign-in.
Built for sites where accounts matter
Anywhere your users sign in, MyPocketKeys makes it faster and harder to break into.
Free while we're in beta
No card, no tiers, no per-login fees. Create an account and start protecting pages today. We'll give you plenty of notice before any paid plans arrive.
MyPocketKeys
- Add multiple sites
- Passwordless passkey & biometric sign-in
- One-tag guard integration
- Sign-in history per site
- Email support
Beta accounts stay free through the beta period.
Questions, answered
Do my users need to install anything?
No. Passkeys and biometric sign-in are built into modern phones, laptops, and browsers. Your visitors just approve with the device they already have.
What do I have to change on my site?
Add one script tag to the page you want to protect. There's no SDK to wire up, no user database to migrate, and no backend changes required.
Is this more secure than passwords?
Yes. Credentials are bound to the user's device hardware and never leave it, so there's nothing to phish, reuse, or leak in a breach. It's built on the WebAuthn standard.
What does it cost?
It's free while we're in beta — no credit card required. If we introduce paid plans later, we'll give existing accounts plenty of notice first.
Which browsers and devices are supported?
Any modern browser with WebAuthn support — current Safari, Chrome, Edge, and Firefox on phones, tablets, and computers.