Pocket ID VPS hosting.

Order a VPS, open One-Click Apps in your dashboard and deploy Pocket ID from the Coolify app marketplace in one click. Coolify pulls the official container, creates the data volume and starts the service. Then point your domain to the VPS, open the URL and register the first admin passkey. Learn more about One-Click Apps

• The default setup uses the built-in SQLite database
• Coolify also offers a Pocket ID variant with PostgreSQL

Pocket ID itself is lightweight: a single program with a built-in SQLite database. What matters is everything else on the server. Size the VPS for Coolify plus the apps you want to run behind Pocket ID. Start with a smaller plan and move to a bigger one when your stack grows.

• Coolify and every extra app add RAM and storage needs
• Photo and file apps like Immich or Nextcloud need the most storage

Yes. Passkeys only work in a secure context, so browsers require Pocket ID to be served over HTTPS on a real domain. Point a domain or subdomain such as id.example.com to your VPS IP, set it as the app URL in Coolify and let Coolify's proxy issue the TLS certificate.

• Keep the domain stable: passkeys are tied to it
• Connected apps use this URL as their OIDC issuer

Yes. Pocket ID is built to be reachable from anywhere, because your apps send users to it to sign in. Passkeys can't be phished or reused on another domain, and there are no passwords to brute-force. Serve it over HTTPS, keep it updated and close unused ports in the VPS firewall. ZAP's DDoS protection filters attack traffic before it reaches your server. Read the firewall guide

Yes. Coolify manages several apps on one VPS, so Pocket ID can run right next to Immich, Nextcloud or Grafana and handle sign-in for all of them. Plan RAM and storage for the whole stack, not just for Pocket ID.

• Any app with OpenID Connect login can use Pocket ID
• User groups decide who may open which app

Pocket ID is the lean choice: passkey-first, quick to set up and focused on OIDC sign-in. Authentik covers more ground, such as custom flows, proxy authentication and more protocols, but needs more resources and setup time. Both run on a ZAP-Hosting VPS, so pick the one that fits your apps.

• Pocket ID: passkeys, OIDC, user groups, audit log
• Authentik: broader protocol support and flow editor

Yes. Pocket ID is open-source software with no license fee. You only pay for the VPS it runs on, and you can cancel anytime.

Yes, you get full root access. Connect over SSH to check containers, read logs, adjust the firewall or run Pocket ID's command-line tools, for example to create a one-time login link for a locked-out user. How to connect via SSH

Yes. Every VPS gets a daily automatic Backup at a fixed time set by the platform, included without ZapX Pass. With ZapX Pass you can see and restore these daily Backups, create manual Backups and snapshots, and keep daily Backups longer depending on your Pass tier.

The VPS is available at locations in Europe and America. Pick the one closest to the people who sign in through Pocket ID; many North American setups start in Ashburn, Dallas or Los Angeles. You choose the location when you order.