Self-Hosted · Docker Ready · Free up to 5 Users

Time Tracking
Made Simple

Klokk is a self-hosted time tracking application for teams — clock in & out, manage leave requests, enforce MFA, and audit everything. Built with Go, runs everywhere Docker does.

Get Started with Docker Docker Hub

No cloud dependencyYour data stays yoursUp and running in minutes

Features

Everything your team needs

A complete time tracking solution with enterprise-grade security, built to run entirely on your own infrastructure.

Time Tracking

Clock in and out with a single click. Daily and weekly hours tracked automatically with overtime detection.

Role-Based Access

Five roles: super_admin, admin, manager, user, auditor. Fine-grained permissions enforced throughout.

Leave Management

Request vacation, sick leave, home office, or business travel. Managers approve in-app with balance tracking.

Shift Planning

Build weekly rosters from reusable templates, publish with ArbZG checks, and handle swaps, open shifts, and availability. Calendar feed and pre-shift reminders included.

MFA / TOTP

Two-factor authentication with any TOTP app. Recovery codes included. Trust-device option for convenience.

Multi-Tenant

Multiple companies in one instance, each fully isolated. Super-admins manage all tenants from one dashboard.

Localization

English and German UI included. Locale-aware date, time, and number formatting throughout.

PWA Support

Install Klokk on mobile as a Progressive Web App with offline capability and native-like experience.

Audit Logging

Every action recorded with timestamps and actor info. Dedicated auditor role for read-only compliance access.

SQLite or PostgreSQL

Start small with SQLite, scale up to PostgreSQL when needed — same binary, same Docker image.

Email Notifications

SMTP-based notifications for leave approvals, corrections, and password resets. Easy to configure or disable.

Configurable Features

Toggle home office tracking, business travel, project time tracking, and more per company or via environment variables.

Security-First

Argon2id password hashing, CSRF protection, rate limiting, IP allowlists, and secure session cookies.

Project Time Tracking

Split working time across projects, customers and activities. Start, switch or stop a project on the clock, reclassify entries later, and export per-project reports.

Accessibility

Built to WCAG 2.1/2.2 AA (EN 301 549 / BFSG): full keyboard operation, screen-reader labels, visible focus, sufficient contrast and reduced-motion support.

Interface

Clean, focused, fast

Every role sees exactly what they need — nothing more, nothing less.

app.klokk.example.com

Clocked In · since 08:12

06:05 / 08:00 h

76% of today's target · est. finish 16:45

This week

this week

8:12Mon

7:48Tue

8:30Wed

7:45Thu

6:05Fri

Week balance38:20 / 40:00 h

Next shift

· Early shift 06:00–14:00

Confirm

Extensions

Extend Klokk

Connect external services through a scoped REST API, webhooks and WebSockets — including first-party extensions for tamper-proof audit anchoring.

Klokk Anchor

Tamper-proof audit anchoring on IOTA

Klokk Ledger

Independent indexer & verification API

Extensions in the docs

Installation

Up and running in minutes

Klokk runs as a single Docker container. No external dependencies required for SQLite mode.

docker run -d \
  --name klokk \
  -p 8080:8080 \
  -v klokk_data:/app/data \
  -e SESSION_SECRET="$(openssl rand -hex 32)" \
  -e CSRF_KEY="$(openssl rand -hex 32)" \
  klokkme/klokk:stable
  # alternative: ghcr.io/klokk-me/klokk:stable

# docker-compose.yml
services:
  app:
    image: klokkme/klokk:stable  # or ghcr.io/klokk-me/klokk:stable
    container_name: klokk_app
    restart: unless-stopped
    ports:
      - "8080:8080"
    environment:
      SESSION_SECRET: "change-me-min-32-chars"
      CSRF_KEY: "change-me-min-32-chars"
      APP_BASE_URL: "http://localhost:8080"
      SESSION_SECURE_COOKIE: "false"
    volumes:
      - app_data:/app/data

volumes:
  app_data:

# docker-compose.yml
services:
  app:
    image: klokkme/klokk:stable  # or ghcr.io/klokk-me/klokk:stable
    container_name: klokk_app
    restart: unless-stopped
    ports:
      - "8080:8080"
    environment:
      DB_DRIVER: "postgres"
      DB_DSN: "postgres://klokk:changeme@postgres:5432/klokk?sslmode=disable"
      SESSION_SECRET: "change-me-min-32-chars"
      CSRF_KEY: "change-me-min-32-chars"
      APP_BASE_URL: "http://localhost:8080"
    depends_on:
      postgres:
        condition: service_healthy

  postgres:
    image: postgres:18-alpine
    restart: unless-stopped
    environment:
      POSTGRES_DB: klokk
      POSTGRES_USER: klokk
      POSTGRES_PASSWORD: changeme
    volumes:
      - pgdata:/var/lib/postgresql
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U klokk -d klokk"]
      interval: 10s
      timeout: 5s
      retries: 5

volumes:
  pgdata:

First login: Navigate to http://localhost:8080 and sign in with [email protected] / Admin@Klokk1. Change the password immediately.

Tech Stack

Built on solid foundations

Carefully chosen technologies that prioritize reliability, simplicity, and a small operational footprint.

Backend language — fast, statically typed, single binary

Chi

Lightweight HTTP router for Go

GORM

ORM for SQLite and PostgreSQL

HTMX

Dynamic UI without writing JavaScript

Alpine.js

Lightweight reactive UI components

Tailwind CSS

Utility-first CSS framework

Docker

Container-first deployment

PWA

Installable on mobile, works offline

Self-Hosted & Licensed

Your infrastructure,
your rules

Klokk runs entirely on your own server. Up to 5 users are free — larger teams, custom branding, and white-labeling require a license.

Docker Hub GHCR View Install Docs

Free for up to 5 users

License required for larger teams

Custom branding & white-labeling

Time Tracking
Made Simple

Everything your team needs

Time Tracking

Role-Based Access

Leave Management

Shift Planning

MFA / TOTP

Multi-Tenant

Localization

PWA Support

Audit Logging

SQLite or PostgreSQL

Email Notifications

Configurable Features

Security-First

Project Time Tracking

Accessibility

Clean, focused, fast

Requests awaiting approval

Overview

Companies

Extend Klokk

Klokk Anchor

Klokk Ledger

Up and running in minutes

Built on solid foundations

Your infrastructure,
your rules

Time TrackingMade Simple

Everything your team needs

Time Tracking

Role-Based Access

Leave Management

Shift Planning

MFA / TOTP

Multi-Tenant

Localization

PWA Support

Audit Logging

SQLite or PostgreSQL

Email Notifications

Configurable Features

Security-First

Project Time Tracking

Accessibility

Clean, focused, fast

Requests awaiting approval

Overview

Companies

Extend Klokk

Klokk Anchor

Klokk Ledger

Up and running in minutes

Built on solid foundations

Your infrastructure,your rules

Time Tracking
Made Simple

Your infrastructure,
your rules