Show HN: Ory Kratos v1.0 Open Source IAM with Passkeys, MFA and Multi-Region

We are excited to announce Ory Kratos v1.0, the powerful identity, user management and authentication system! With this major update, Ory Kratos brings a host of improvements and fixes that significantly improve user experience and overall performance.

Ory Kratos 1.0 is stable and robust

Several compelling reasons led to labeling Ory Kratos as a major release and a graduated project: Ory Identities on Ory Network, powered by Ory Kratos, has served production traffic for over a year, flawlessly. Ory Kratos successfully processes over 100 million API requests per day and has around 100 million Docker Pulls. We have maintained stability within Ory Kratos APIs for almost two years, demonstrating their robustness and reliability. No breaking changes means developers can trust the stability of Ory Kratos in production.

Notable changes

Ory Kratos 1.0 introduces a variety of new features while focusing on stability, robustness, and performance improvements. Key improvements include support for social login and single sign-on via OpenID connect in native apps, emails sent via HTTP rather than SMTP, and full compatibility with Ory Hydra v2.2.0. Users will also find multi-region support in the Ory network for wider geographic reach, improved export functionality for all credential types, and improved session management with the introduction of the "ID from the supplier". Other additions include distroless images for lighter resource usage and faster deployment and support for the Lark OIDC provider.

New features and full multi-region support in Ory Network

Significant improvements and fixes accompany these new features. Enhanced OIDC flows now include the ability to push prompt settings upstream, giving developers increased flexibility and customization options. The logout flow also supports the return_to parameter, facilitating more flexible redirection after user logout. Performance has been a key focus, with Ory Kratos 1.0 now capable of handling hundreds of millions of monthly active users. Critical bug fixes have been applied to prevent users from being redirected to incorrect destinations, ensuring smoother authentication and authorization. Additionally, there is more support for legacy systems via the implemented crypt(3) hashers and a metadata fix patch has been deployed to ensure consistent handling of user metadata. For a detailed view of all changes, see the changelog on GitHub. Feedback and support are, as always, greatly appreciated.

Support options for Ory Kratos 1.0

Ory Kratos 1.0 is a major release that marks an important milestone in our journey.

We sincerely hope that these new features and improvements of Ory Kratos 1.0 will be useful for your projects. To experience the power of the latest version, we encourage you to get the latest version of Ory Kratos here or use Kratos in

For organizations looking to upgrade their self-hosted solution, Ory offers dedicated support services to ensure a smooth transition. Our team is ready to assist you throughout the migration process, ensuring uninterrupted access to the latest features and enhancements. Additionally, we offer a variety of features specifically tailored to self-hosted organizations. These plans offer comprehensive support and guidance to optimize your Ory deployments and meet your unique needs.

A tribute to the Ory community

We express our deep gratitude to the dynamic and supportive Ory community. Without your constant support, feedback and contributions, reaching this important milestone would not have been possible. As we continue this journey, your comments and suggestions are invaluable to us. Together, we are shaping the future of identity management and authentication in the digital landscape.

Contributors to this release in alphabetical order: borisroman, ci42, CNLHC, David-Wobrock, giautm, IchordeDionysos, indietyp, jossbnd,