Passkeys

When ENABLE_PASSKEYS=true, Account UI provides passkey registration and management.

Passkey Registration

• Setup wizard guides users through passkey creation
• Supports fingerprint, Face ID, and hardware security keys
• Multiple passkeys can be registered per account

Passkey Signup

When ENABLE_PASSKEY_SIGNUP=true, users can create an account using only a passkey — no email required.

• "Create Account with Passkey" button on the signup page
• Creates an anonymous session, registers a passkey, then shows an email collection step
• Users can optionally provide their name and email address, or skip
• If email is provided and email delivery is configured, users verify via OTP then go to dashboard
• If email is skipped, users go straight to dashboard
• When email delivery is configured, both passkey and email signup options are shown on the initial signup page
• When email delivery is not configured, only passkey signup is shown — preventing users from getting stuck on a verification flow that can't send emails

The email collection step is always shown (even when email delivery isn't configured) because the email is still useful as an identifier for the account.

Passkey Login

• "Sign in with passkey" button on login page
• Browser's native WebAuthn dialog
• No password required

Managing Passkeys

• View registered passkeys
• Remove individual passkeys
• Register additional passkeys

Requirements

• HTTPS (WebAuthn requires secure context)
• Modern browser with WebAuthn support

Related

• Auth Plugins — Plugin configuration
• Environment Variables