mirror of
https://github.com/andwati/zitadel.git
synced 2026-10-20 06:24:25 +00:00
* wip * update intro of device auth * add custom domain concept * wip sidebar * wip introduction * add passkeys * replace azure ad with entra id * wip * wip * login methods * expand sections automatically * update selfservice docs * wip - hosted done * move onboarding * clean up * wip * unbreak my hrefs * finish login users * update managers * add console as feature * update b2b with multi-tenancy * update saml * update console concept * add opaque tokens as knowledge * redirects * intro b2b * remove login/saml * unbreak link * Apply suggestions from code review Co-authored-by: Fabi <[email protected]> * passkeys: add custom domain first * update passkeys * Apply suggestions from code review Co-authored-by: Florian Forster <[email protected]> * Update docs/docs/guides/integrate/login/login-users.mdx Co-authored-by: Florian Forster <[email protected]> --------- Co-authored-by: Fabi <[email protected]> Co-authored-by: Florian Forster <[email protected]>
2.3 KiB
2.3 KiB
title, sidebar_label
| title | sidebar_label |
|---|---|
| Passkeys in ZITADEL: Passwordless phishing-resistant authentication | Passkeys |
ZITADEL's passkeys feature enables passwordless authentication, offering a smoother and more secure login experience for your users. This document explains the essential details for developers.
What are Passkeys?
Imagine signing in without passwords! Passkeys, replacing traditional passwords, leverage public-key cryptography similar to FIDO2 and WebAuthn. Users rely on their devices' biometrics or PINs for authentication, eliminating password burdens.
Benefits for Developers
- Enhanced Security: Phishing-resistant passkeys minimize credential theft risks.
- Streamlined User Experience: Faster, easier logins free users from managing passwords.
- Platform Agnostic: Works across devices and platforms supporting passkeys.
- Modern Standard: Complies with the FIDO2 and WebAuthn standards.
Features
- Seamless Registration: Create unique passkeys for users on various devices. Optionally pair them with specific users and choose cross-platform or platform-specific options.
- User Control: Users manage their passkeys directly through ZITADEL's self-service portal, allowing registration, viewing, and deletion.
- Intuitive Login: Users initiate passwordless login by selecting the passkey option and verifying themselves with the device's biometrics (fingerprint, face ID, etc.).
- Robust Fallback: Traditional password login remains available for users without passkeys.
Developer Resources
- Documentation: Passkeys Guide: https://zitadel.com/docs/guides/integrate/login-ui/passkey
- Create Passkey Registration Link API: https://zitadel.com/docs/guides/manage/user/reg-create-user
Notes
- Passkey support is still evolving in browsers and platforms. Check compatibility for your target audience.
- ZITADEL actively develops its passkey features. Stay updated with documentation and releases.
- Passkeys are bound to your domain, thus we recommend configuring a custom domain before setting up passkeys.
Don't hesitate to ask if you have further questions about integrating passkeys in your ZITADEL application!