Activate Passkeys and Let Your Users Log in without a Password

alexander.olaru
Thu, 31 Oct 2024 09:57:38 +0000

I would take the “Passkey enrollement invitation” idea/feature request (which I think it is great) further:

Ideally, (especially when starting with a new tenant, i.e. empty users auth DB), it would be great if a tenant admin has the option to setup the passkeys as the ONLY supported mechanism for login.

Passkeys are still new to many users and it’s sometimes too much of a cognitive load for a user at registration time to have to choose between multiple authentication options + they might just revert to the known uid/password (even if MFA is thrown on top of it later in the registration flow, which will bring more friction to their future logins) and skip using the Passkey, which is arguably not only more secure but also simpler to use.

I have tried to customize the continueButtonText so I can remove the “Continue without passkeys” button:
https://auth0.com/docs/customize/login-pages/universal-login/customize-text-elements
during the passkey setup form on the signup flow but I have not been successful to do so. And I presume it is because the statement below.

To go to a PASSKEY ONLY login setup, there would need to be an account recovery mechanism through which a user can generate a new passkey when the user loses the device and can’t have the passkeys synced or switches for e.g. from iOS/Macbook devices to Android/Windows and the Keychain sync won’t be useful any longer.

And for this account recovery mechanism, the passkey reset email or passkey enrollment invitation needs to be in place.

BTW, we are curious too when this proposed new feature might be able to be added.