- vaultwarden by dani-garcia, 71k stars. Lightweight Bitwarden-compatible password server in Rust
- keycloak by keycloak, 38k stars. Open source identity and access management server with OIDC and SAML
- vault by hashicorp, 37k stars. Secrets management, encryption as a service and privileged access
- jumpserver by jumpserver, 32k stars. Privileged access management platform for SSH, RDP, Kubernetes and database access
- netbird by netbirdio, 31k stars. Mesh VPN on WireGuard with identity-based zero trust access control
- better-auth by better-auth, 31k stars. TypeScript authentication framework with OAuth, OIDC, and IAM support
- fingerprintjs by fingerprintjs, 29k stars. Open source browser fingerprinting library for device identification
- authentik by goauthentik, 26k stars. Self-hosted identity provider supporting SAML and OAuth2
- pangolin by fosrl, 24k stars. Self-hosted reverse proxy and WireGuard tunnel with SSO for exposing private apps
- YubiKey-Guide by drduh, 13k stars. Step-by-step notes for using a hardware key with GPG and SSH
- git-credential-manager by git-ecosystem, 9.4k stars. Cross-platform Git credential storage for GitHub, Azure Repos and others
- openbao by openbao, 9.0k stars. Secrets manager for storing and distributing keys, certificates, and tokens
- howdy by boltgolt, 7.9k stars. Face authentication for Linux login through a PAM module and IR camera
- gopass by gopasspw, 7.3k stars. Unix password manager built on GPG and git, with team support
- voidauth by voidauth, 2.9k stars. Single sign-on for self-hosted services with OIDC and proxy auth
- oneterm by veops, 2.0k stars. Web-based gateway for managing SSH and RDP access to infrastructure
- glance by jonnyoo, 1.9k stars. Unlocks a Mac with face recognition using computer vision
- leapp by Noovolari, 1.8k stars. Desktop app that manages temporary AWS credentials and SSO sessions
- VaulTLS by 7ritn, 1.2k stars. Self-hosted web app for issuing and managing mTLS certificates
- tesseral by tesseral-labs, 1.1k stars. Open source authentication and user management service for B2B SaaS
- bramble by flythenimbus, 627 stars. Local password manager and TOTP authenticator with device-to-device sync
- FaceGate-Mac by dweep-desai, 597 stars. Locks Mac apps with face recognition, Touch ID or a password, all local
- ivxv by valimised, 523 stars. Go implementation of an end-to-end verifiable online voting system
- OpenInstinct by Merit-Systems, 491 stars. Personal assistant that runs over iMessage with a built-in password vault
- letsseal by letsseal, 379 stars. Open standard for signing files so their origin and integrity can be verified
- talos by ory, 204 stars. API key server with capability tokens for users, services, and AI agents
- jit by jitpass, 164 stars. Moves plaintext secrets on a Mac behind Touch ID, injected just in time
- OpenKeylet by omaekumiko2-create, 135 stars. Local credential vault that exposes secrets to AI agents over MCP
- av-doc-technical-specification by eu-digital-identity-wallet, 98 stars. Technical specification for EU age verification in digital identity wallets
- agentic-identity-broker by zalando-incubator, 79 stars. Identity broker for AI agents with OAuth2 delegation and consent
New repos every two days, stars refreshed daily. Visits are counted without cookies, and the numbers are public. How it works Data RSS Newsletter