Add support for passkeys (WebAuthn as primary authentication) #9925

New Issue

GiteaMirror · 2025-11-02T08:53:14-06:00

GiteaMirror commented

2025-11-02 08:53:14 -06:00

Originally created by @Saklad5 on GitHub (Dec 3, 2022).

Feature Description

Passwords are a pain to deal with, and best avoided. Multi-device FIDO credentials, also known as passkeys, are intended to supplant passwords and multi-factor authentication entirely by using public keys as the sole method of authentication.

Because they use the WebAuthn specification, minimal changes are needed for an application like Gitea to support them: simply allow accounts to be set up with a WebAuthn key instead of a password, and adjust the login flow accordingly.

I'd also like the ability to disable password support entirely. While passkey support is still being rolled out across the major operating systems and browsers, my own systems all support it right now.

Originally created by @Saklad5 on GitHub (Dec 3, 2022). ### Feature Description Passwords are a pain to deal with, and best avoided. Multi-device FIDO credentials, also known as passkeys, are intended to supplant passwords and multi-factor authentication entirely by using public keys as the sole method of authentication. Because they use the WebAuthn specification, minimal changes are needed for an application like Gitea to support them: simply allow accounts to be set up with a WebAuthn key instead of a password, and adjust the login flow accordingly. I'd also like the ability to disable password support entirely. While passkey support is still being rolled out across the major operating systems and browsers, my own systems all support it right now.

GiteaMirror added the topic/authentication type/proposal type/feature labels 2025-11-02 08:53:14 -06:00

GiteaMirror closed this issue

2025-11-02 08:53:14 -06:00

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/gitea#9925