XF 2.3 Passwordless logins with passkeys

First thing's first, don't panic, don't rush to your customer area, there is no Beta 3 release today! We are likely to be moving the remaining HYS posts to Thursday/Friday, coinciding with those features rolling out to this very forum so we get some extended testing and feedback before they appear in a subsequent Beta.

Next order of business, before we get into what's coming in Beta 3, is a big thank you to Shawn, AKA @digitalpoint. We're big fans of Shawn's work and he's genuinely a stand up guy, always very willing to help out. Shawn was kindly willing to give us his Security & Passkeys add-on and this gave us the leg up we needed to introduce this feature at rather short notice. It has morphed slightly, and does not entirely replace the add-on so I suspect it will live on in some form and I'm sure Shawn will communicate that in due course.

So, with all that being said, let's take a look at passkeys support in XenForo 2.3!

What is a passkey?​

Passkeys are a secure replacement for passwords and/or second factor authentication. They take many forms ranging from physical devices (e.g. Yubikeys) to biometric authentication built in to your phone or computer. Some types of passkeys can even be synced across all of your devices, for example I can setup a passkey using my fingerprint on my MacBook Pro which is then synchronised with my iPhone and authenticated using FaceID. Or you may have a password manager such as Bitwarden or Proton Pass which synchronise your passkeys across different browsers and devices.

They are extremely secure, extremely easy to set up and extremely easy to use.

Adding a passkey in XF 2.3​

Passkeys can be managed for your account under Account > Password and security. To kick the process off you simply click "Add passkey" which, in supported browsers, will invoke some sort of interface, usually served by your browser, device, or password manager.

Let's look at the process in more detail via an iPhone:



It's that easy! From that point forward, not only will you be able to use your passkey for logging in, it also enables any of your current or future passkeys to be used as two-factor authentication.

Passwordless login​


It's just as easy using a passkey as it is to add one. Let's take a look at the login flow with the passkey I just created:




No need to enter your password. No need to even enter your username! Just tap "Log in using: Passkey" and follow your device's prompts and you'll be logged in!

We've just rolled this out here so have a play around and let us know your thoughts!
 
So after some work with Proton direct, the majority if not all issues with their app should be sorted.

If anyone is still having issues with Passkeys and Proton on mobile with XF, let me know and I should be able to run through some steps to sort it, or locate a different issue.

For now it will just cover signing in here at XenForo.com
I just tested it again and it seems to work. This was via the pwa on my phone.

I deleted the old passkey, and I started setting up a new one on my pixel 8 pro with proton pass.

The passkey created fine, on mobile vs limited to desktop app creation.
 
We supporrt logging in to the admin control panel with passkeys starting with Beta 4:

1712856300656.webp
 
So after some work with Proton direct, the majority if not all issues with their app should be sorted.

If anyone is still having issues with Passkeys and Proton on mobile with XF, let me know and I should be able to run through some steps to sort it, or locate a different issue.

For now it will just cover signing in here at XenForo.com

All good for me - seems to have sorted two issues I was having: 1) I can now create a Windows Hello passkey for xenforo.com on my laptop which was previously refusing to work, 2) I was able to create new xenforo.com passkeys for each of my 3 yubikeys and use them to log in - including using one of them to log in on a different device.
 
Top Bottom