Skip to main content
zkLogin enables users to authenticate using familiar OAuth providers (Google, Facebook, etc.) without managing private keys.

Overview

zkLogin allows users to:
  • Sign in with Google, Facebook, Twitch, or other OAuth providers
  • Create Sui addresses derived from their OAuth identity
  • Sign transactions without managing private keys
  • Maintain security through zero-knowledge proofs

How It Works

  1. User authenticates with OAuth provider (e.g., Google)
  2. OAuth provider returns JWT token
  3. Client generates ephemeral keypair
  4. Zero-knowledge proof is created linking JWT to Sui address
  5. Transactions are signed using ephemeral key + ZK proof

Integration

Using @mysten/zklogin

Enoki Integration

Enoki provides a managed zkLogin solution:

Benefits

  • User-friendly: No seed phrases to manage
  • Familiar: Use existing Google/Facebook accounts
  • Secure: Zero-knowledge proofs protect privacy
  • Non-custodial: Users maintain control

Use Cases

  • Consumer dApps requiring easy onboarding
  • Gaming applications
  • Social platforms
  • NFT marketplaces

Learn More