Locke Gateway review
A focused, free WebAuthn gateway with hosted and self-hosted deployment options.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Locke Gateway is a free, hosted, multi-tenant passkey server for developers adding WebAuthn authentication to applications. It covers passkey registration and authentication, session management, credential storage, domain scoping, rate limiting, and an encrypted key-value vault. The product is aimed at teams that want a focused authentication gateway without building a backend, while retaining the option to self-host later.
The published Free plan costs $0 USD forever and includes passkey registration and authentication, session management, encrypted key-value storage, credential export, and a hosted multi-tenant server. There are no paid tiers described. The deployment model covers both hosted use and self-hosting, and self-hosting can use the same client interface. That combination suits teams that want to start with a managed service while preserving a path to deployment under their own control.
Its standout depth is in passkey and session handling. Locke Gateway supports signed session cookies, session revocation, per-IP and per-RP rate limiting, automatic RP ID and domain credential scoping, DNS-based domain verification, and public-key export. It also provides post-quantum hybrid signature support and an end-to-end encrypted key-value vault. The narrower web and API focus may be less suitable for teams seeking broader authentication coverage, while the device-bound passkey model may not fit every passkey strategy. Choose Locke Gateway for a free, open-source WebAuthn layer with hosted and self-hosted options; consider an alternative when wider platform coverage is the priority.
Locke Gateway pros and cons
- Where it wins
- Free hosted multi-tenant server with no paid tier
- Session controls, rate limiting, and domain credential scoping
- Open source with self-hosting through the same client interface
- Where it doesn't
- Narrower coverage for teams needing broader application support
- Supports device-bound passkeys
- No AI features are included
Locke Gateway fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update