Passkeys

When the passkey feature is enabled (enablePasskey on the runtime config, default: false), Account UI provides passkey registration and management. When it is off, the passkey routes guard themselves at runtime — direct navigation redirects away and the management pages never render.

Passkey Registration

• Setup wizard guides users through passkey creation
• Supports fingerprint, Face ID, and hardware security keys
• Multiple passkeys can be registered per account

Passkey Login

• "Sign in with passkey" button on login page
• Browser's native WebAuthn dialog
• No password required

Managing Passkeys

• View registered passkeys
• Remove individual passkeys
• Register additional passkeys

Requirements

• HTTPS (WebAuthn requires secure context)
• Modern browser with WebAuthn support

Related

• Auth Plugins — Plugin configuration
• Environment Variables