Simple OTP 2.0 - passwordless auth for your website. Source code included.
Hey IH! Relaunching my product, Simple OTP, as a one-time-payment app today and including the source code with each purchase. I'm a solo founder on the product and built everything myself.
Check out the launch here and let me know what you think: https://www.producthunt.com/posts/simple-otp-2
Thanks!
Trending on Indie Hackers
Great. Could you briefly write about what technology you use to power the passwordless auth? Is it FIDO 2 compliant?
Hi @khanzia, thank you! Simple OTP does not yet support hardware security keys. Today, it supports two forms of passwordless authentication:
These are sent to the user via email. When setting up a site for the first time you can select one of those two auth methods.
Let me know if this helps! I’ll also note down hardware security keys as a feature request.
EDIT: 3/18 -- Simple OTP now supports FIDO 2 / WebAuthn!
FIDO 2 is pretty simple and does not necessarily require the end user to use hardware e.g. YubiKey. May I suggest you pay some attention to how the standard works, like the lifecycle and the flow of an authentication request, and then add that to your product as a passwordless method?
Remember that all giants, including Google, Apple, and Microsoft have recently been pushing for passwordless of their own and I can tell you as a subject expert that all of them are using the FIDO 2 mechanism under the hood.
P.S.
You only need to work with cryptographic signatures. It's a lot more simple than it sounds. You only need a week or two to get the gist of it, and then it will all run as smooth as butter.
Yep, I do understand your request and I've thought about adding this as an allowed authentication method before. I use passkeys/webauthn myself when I log into GitHub (not using a literal separate security key, but with touch id), so this kind of authentication is definitely becoming more popular recently and for good reason!
I'll spend some time this week investigating what kind of OSS libraries are available for Go and see how I can fit this into my existing product here -- it should be doable. No promises certainly and no specific date when this will be implemented just yet, but thank you again for re-bringing this to my attention and I'm on it!
Hey @khanzia, your estimate of a couple weeks was just about right and I've implemented your suggestion! Check out how easy it is to register a passkey with Simple OTP: https://www.youtube.com/watch?v=yAa9Uq61o6w
This feature will be available to all customers in the next few days. I'll be doing an additional Product Hunt launch when the release happens, just wanted to give you an update as fast as possible since you asked for the feature.
NOTE: The price of Simple OTP will go up once the release is live. Right now it's $19/one time, and with WebAuthn/FIDO2 support added, I'm going to up the price to $39/one time to account for the extra value I'll be providing. If you'd like to buy Simple OTP before the price goes up, you will get this feature as soon as it's released at no additional cost.
Thanks again for your input!
The WebAuthn feature has been launched so pricing is now $39.
Good job!
Thanks! Just made my first sale from Product Hunt via this launch as well which is exciting