Files
zitadel/docs/docs/concepts/features/passkeys.md
T
da8a79f280 docs(integrate): Update login users docs (#7414)
* wip

* update intro of device auth

* add custom domain concept

* wip sidebar

* wip introduction

* add passkeys

* replace azure ad with entra id

* wip

* wip

* login methods

* expand sections automatically

* update selfservice docs

* wip - hosted done

* move onboarding

* clean up

* wip

* unbreak my hrefs

* finish login users

* update managers

* add console as feature

* update b2b with multi-tenancy

* update saml

* update console concept

* add opaque tokens as knowledge

* redirects

* intro b2b

* remove login/saml

* unbreak link

* Apply suggestions from code review

Co-authored-by: Fabi <[email protected]>

* passkeys: add custom domain first

* update passkeys

* Apply suggestions from code review

Co-authored-by: Florian Forster <[email protected]>

* Update docs/docs/guides/integrate/login/login-users.mdx

Co-authored-by: Florian Forster <[email protected]>

---------

Co-authored-by: Fabi <[email protected]>
Co-authored-by: Florian Forster <[email protected]>
2024-02-26 13:04:09 +05:30

2.3 KiB

title, sidebar_label
title sidebar_label
Passkeys in ZITADEL: Passwordless phishing-resistant authentication Passkeys

ZITADEL's passkeys feature enables passwordless authentication, offering a smoother and more secure login experience for your users. This document explains the essential details for developers.

What are Passkeys?

Imagine signing in without passwords! Passkeys, replacing traditional passwords, leverage public-key cryptography similar to FIDO2 and WebAuthn. Users rely on their devices' biometrics or PINs for authentication, eliminating password burdens.

Benefits for Developers

  • Enhanced Security: Phishing-resistant passkeys minimize credential theft risks.
  • Streamlined User Experience: Faster, easier logins free users from managing passwords.
  • Platform Agnostic: Works across devices and platforms supporting passkeys.
  • Modern Standard: Complies with the FIDO2 and WebAuthn standards.

Features

  • Seamless Registration: Create unique passkeys for users on various devices. Optionally pair them with specific users and choose cross-platform or platform-specific options.
  • User Control: Users manage their passkeys directly through ZITADEL's self-service portal, allowing registration, viewing, and deletion.
  • Intuitive Login: Users initiate passwordless login by selecting the passkey option and verifying themselves with the device's biometrics (fingerprint, face ID, etc.).
  • Robust Fallback: Traditional password login remains available for users without passkeys.

Developer Resources

Notes

  • Passkey support is still evolving in browsers and platforms. Check compatibility for your target audience.
  • ZITADEL actively develops its passkey features. Stay updated with documentation and releases.
  • Passkeys are bound to your domain, thus we recommend configuring a custom domain before setting up passkeys.

Don't hesitate to ask if you have further questions about integrating passkeys in your ZITADEL application!