This plugin adds WebAuthn and passkey support to the Two Factor plugin, providing a modern, secure authentication method.
Features:
- Support for WebAuthn and passkeys (Windows Hello, Touch ID, YubiKeys, etc.)
- Backward compatibility with previously registered U2F security keys
- User-friendly settings and seamless authentication experience
- Customizable error logging and behavior via action hooks
- Works with the Two Factor plugin for flexible 2FA authentication
The plugin enables users to register and use hardware security keys and platform authenticators for stronger protection against password-based attacks and phishing.
Google Chrome deprecated the U2F API. As a consequence, the U2F provider of the Two Factor plugin no longer works. This plugin uses the WebAuthn Authentication API compatible with U2F and provides a replacement for the U2F provider.
The integration is seamless: if the user has U2F credentials registered, the plugin will import them. If the user has the U2F provider enabled, the plugin will automatically enable the WebAuthn provider as well. If the U2F provider is set as the primary authentication method, it will be replaced with WebAuthn, keeping U2F as a backup method.
webauthn.mp4
See readme.txt for the changelog.
This repository includes workspace Copilot customizations (instructions, prompts, agents, and hooks).
See CUSTOMIZATIONS.md for usage and invocation examples.