How to disable the passkey feature?

[kenjdarhan (Ken)]

Hello,

How do I cancel the option to log in with a passkey for the forum users?

Thanks.

[Firepup650 (Firepup Sixfifty)]

@kenjdarhan

How do I cancel the option to log in with a passkey for the forum users?

Might I ask, why do you want to disable passkeys?

[kenjdarhan (Ken)]

For my users, they would find it confusing because normally they just log in using username and password.

[Firepup650 (Firepup Sixfifty)]

I suppose you could CSS hide it in a theme component:

@pmusaraj

You can hide it with some CSS in a theme component, something like this should work:

.passkey-login-button {
  display: none;
}

That only hides the button, it still allows users to create and login with passkeys via autocomplete in the main login form (on the left of your screenshot).

There doesn’t seem to be a site setting for it, at least not visibly.

[kenjdarhan (Ken)]

Thanks that worked.

But that will make the login window a little bit visually not good.

I would be grateful if it is possible to have a setting that disables passkey and only allows logging in only using username and password.

I remember before a certain upgrade there was no passkey. It just suddenly appeared after an upgrade.

[Firepup650 (Firepup Sixfifty)]

@kenjdarhan

But that will make the login window a little bit visually not good.

This CSS tweak should work, assuming you never add google logins or similar:

.login-right-side {
    display: none;
}

[Lilly]

If self hosted, to disable passkeys:

launcher enter app
rails c
SiteSetting.enable_passkeys = false

if hosted, contact CDCK (or whoever is hosting your forum)

---

Passkey setup here:

Passwordless login using passkeys

Following up on Support passwordless login with Passkeys and a few weeks of internal testing, we are happy to announce that support for passkeys has now landed in Discourse. What are passkeys Passkeys are a safer, simpler alternative to using passwords for authentication. Creating and using a passkey is now widely supported across platforms and browsers. Compared to passwords, passkeys have better built-in safety due to strong platform-generated credentials and biometric identity validation (li…

[pmusaraj (Penar Musaraj)]

@kenjdarhan

they would find it confusing because normally they just log in using username and password

I just want to add a small note about this. I completely understand how you are feeling here re: users getting confused.

That said, we (and you as the site admin for your instance) have a bit of a role to play here. We all know passwords aren’t perfect, people are used to them yes, but they often forget them, have a hard time coming up with safe passwords, tend to reuse them etc. One way to get people to a better place for their own security is to promote passkeys wherever we can. Yes, at first, it is going to be confusing for non-technical users. But the more they see passkeys in the tools they use the more likely they are to try them. And once they (hopefully) get past that first hurdle, they might end up liking and using passkeys, driving up adoption and eventually they’ll become as familiar as password. And… safer!

That’s the reasoning anyway behind making this a default ON feature and hiding the site setting. The web industry at large is supporting passkeys and we’re doing a small part to promote their use. (That’s my 5-second pitch for “leave this setting enabled, please and help your users learn to use passkeys”.)

[Kartoon]

But they don’t have to use it if they don’t want to?