Passkey-first
Sign in with a face, fingerprint or device PIN. Nothing to phish and nothing to forget. Passwords remain as a fallback, and an app can insist on a phishing-resistant sign-in.
Built by Kingdom
Kingdom ID: One key to every Kingdom app
Kingdom ID is the account system behind every app we build: one passkey sign-in for Cappuccino, InkSpirit and whatever comes next. It's a complete OAuth 2.0 and OpenID Connect provider we wrote directly from the specifications, with no OIDC library underneath.
24
specifications implemented
0
failures on the OpenID Foundation Basic OP plan
222
automated tests, browser and server
2.06×
throughput from a second instance
What it does
Sign-in people can trust.
Private by default
Outside apps each get their own ID for a person, so they can't link anyone across apps. Kingdom's own apps share one, so perks and history follow the member.
A private email for every app
Each app gets its own relay address. Mail reaches the member, replies go back out through the relay, and the real address never leaves Kingdom.
One dashboard for everything
Your Kingdom shows every connected app, exactly what each one received, perks that carry across apps and a security timeline. One click disconnects an app everywhere.
Your Kingdom
One dashboard for every app.
- Realms
- Every connected app and the exact details it received. Disconnecting revokes its access immediately, and can sign the member out of the app itself.
- Treasury
- Perks the member has unlocked across Kingdom apps, and the ones within reach.
- Masks
- Each app's private email address, with how much mail it forwarded and blocked. Pause it or retire it for good.
- Watchtower
- A timeline of sign-ins, failed attempts, new passkeys and connected apps, with alerts when Kingdom ID blocks a stolen token.
- Keys
- Passkeys: add them, remove them, and see when each was last used.
Security
Built for the attacks an identity provider actually faces.
- PKCE on every client, and single-use authorization codes that expire in 60 seconds
- Refresh tokens that rotate on every use, with the whole family revoked if a spent one reappears
- Passkeys bound to Kingdom's origin, so a look-alike site gets nothing it can use
- Encrypted signing keys that rotate every 30 days
- A live detection pipeline for credential stuffing, token reuse and sign-ins from new places
- A strict, nonce-based Content Security Policy and WCAG 2.1 AA checks in the browser tests
Built with TypeScript, Node, Fastify, Postgres and Redis. Stateless, so any instance can serve any request.
Want this for your own apps?
Kingdom ID is the kind of system we build for clients: standards-based, secure from the first commit, and yours to own. If your products need one sign-in, or your sign-in needs to be trustworthy, let's talk.