Hexclave

Authentication that just works

Passkeys + OAuth·Agent auth·Sessions & admin tools

Drop in one component, ship the whole flow

One component·Dashboard toggles·Agent auth included

tsx
1import { StackHandler } from "@stackframe/stack";
2import { stackServerApp } from "@/stack";
3 
4export default function Handler(props: unknown) {
5 return <StackHandler app={stackServerApp} {...props} fullPage />;
6}

Everything you need for authentication

Every method users expect·Sessions & tokens·Admin tools

Dashboard/
Sign-in methods
Sign-in methods
Each method is independently toggleable.

01·Sign-in methods

Every sign-in method, one component

  • Every social login your users already use
  • Passkeys, password, magic links
  • Email-code 2FA for an extra factor without TOTP apps
  • Anonymous users that upgrade in place
  • Update your authentication setup directly from the dashboard
Social loginPasskeysMagic linksEmail 2FAAnonymous
Security/Sessions
ES256 JWT
your-app.com/account/security
Active sessions
Each session holds an ES256 JWT. Revoke to invalidate.

04·Sessions & tokens

ES256 JWT sessions, revoke from anywhere

  • ES256-signed JWTs with automatic refresh and rotation
  • Inspect every active session — device, location, last seen
  • Revoke a device and its tokens are invalid everywhere, instantly
  • Users can audit their own sessions from your account page
ES256 JWTRefresh & rotateActive sessionsRevoke
Admin/Impersonate
Audit-logged
your-app.com/admin/users
Users
3,184 members · admin view
Search…

03·Admin impersonation

Log in as any user

  • One click to step into a user's account for support or debugging
ImpersonationAudit logSupport tool
Terminal/
$ mytool login
ada@laptop — mytool
~/project $ 

02·Agent auth

Auth for agents, not just humans

  • Browser-based device flow for CLI & Desktop tools
Device flowCLI & desktop auth
Fraud Protection · sub-app

Stop the bad sign-ups before they're users

Block disposable emails, throwaway domains, and high-risk countries. Score every sign-up and keep the bots out without slowing real users down.

Explore Fraud Protection

Ready to ship secure auth?

Drop in a single app — or use the whole platform. Either way, you ship faster.

Get started for free