# תמיכה בכניסה ללא סיסמה עם Passkeys
**URL:** https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259
**Category:** Feature
**Tags:** completed, passkey
**Created:** [7 ביוני, 2022, 1:10am UTC](https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259 "2022-06-07T01:10:40Z")
**Posts on this page:** 20
**Page:** 2
### Author:  [@tcannonfodder](https://meta.discourse.org/u/tcannonfodder)
#### Post date: [27 באפריל, 2023, 1:04pm UTC](https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259/25 "2023-04-27T13:04:59Z")
👋 Thomas Cannon here, one of the lead maintainers for the Ruby passkeys organization!
There are some libraries that have been put together to help with this, but we desperately need maintainers. Some relevant links below:
- Github Organization: [Ruby passkeys · GitHub](https://github.com/ruby-passkeys)
- Devise issue: [Passkeys support · Issue #5527 · heartcombo/devise · GitHub](https://github.com/heartcombo/devise/issues/5527)
Definitely want to help as much as we can; and pool resources to make passkeys the standard across the Ruby ecosystem 💪
---
### Author:  [@sam](https://meta.discourse.org/u/sam)
#### Post date: [3 במאי, 2023, 9:52pm UTC](https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259/26 "2023-05-03T21:52:52Z")
Hi Thomas,
Discourse ships with its own auth system built directly on webauthn for 2fa. I think the only big gap we have now is that we don’t allow 2fa to be the only factor (optionally)
I noticed Google are all in now as well (as of yesterday), [Passkeys: What they are and how to use them](https://blog.google/technology/safety-security/the-beginning-of-the-end-of-the-password/)
I do hope to make this an option for Discourse as well, I really do hate passwords and 2fa+challenge only to me feels inherently better than password, for sure.
---
### Author:  [@tcannonfodder](https://meta.discourse.org/u/tcannonfodder)
#### Post date: [3 במאי, 2023, 10:16pm UTC](https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259/27 "2023-05-03T22:16:00Z")
Awesome! What’s the best way I could help out?
---
### Author:  [@sam](https://meta.discourse.org/u/sam)
#### Post date: [3 במאי, 2023, 10:50pm UTC](https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259/28 "2023-05-03T22:50:58Z")
Tricky, depends on how deep down the rabbit hole you want to go. A prototype PR that adds a site setting would be delightful, but I totally get that this can be a rather big time commitment.
---
### Author:  [@tcannonfodder](https://meta.discourse.org/u/tcannonfodder)
#### Post date: [4 במאי, 2023, 12:07am UTC](https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259/29 "2023-05-04T00:07:42Z")
I can try! No promises, so if anyone wants to beat me to to the lunch, go for it!
---
### Author:  [@pmusaraj](https://meta.discourse.org/u/pmusaraj)
#### Post date: [14 בספטמבר, 2023, 6:51pm UTC](https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259/32 "2023-09-14T18:51:59Z")
A quick update: support for passkeys in Discourse is coming soon. I’ve been working on this over the past few weeks and we have a couple of draft PRs ready. See [#23586](https://github.com/discourse/discourse/pull/23586), [#23587](https://github.com/discourse/discourse/pull/23587) and [#23591](https://github.com/discourse/discourse/pull/23591).
I think in about 3-4 weeks, we should be able to merge this (behind a default-off site setting). And if we grant a few more weeks for testing and bug fixing, I suspect we’ll be able to have this production-ready state in about two months. Stay tuned!
---
### Author:  [@pawelorzech](https://meta.discourse.org/u/pawelorzech)
#### Post date: [22 באוקטובר, 2023, 10:43pm UTC](https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259/33 "2023-10-22T22:43:40Z")
Hi there! Is there anything new to be said about passkeys in Discourse?
---
### Author:  [@hello-smile6](https://meta.discourse.org/u/hello-smile6)
#### Post date: [22 באוקטובר, 2023, 10:48pm UTC](https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259/34 "2023-10-22T22:48:48Z")
It appears that the final PR for this was [merged](https://github.com/discourse/discourse/pull/23853) a week ago, and the name of the site setting [appears to currently be `experimental_passkeys`](https://github.com/discourse/discourse/commit/e41539492c3da19e12cc1f7a432b8f609d1f9080#diff-bff2842c9891df212adcbe8eb22a4a17c9644c676260a0cfa6e7a3953852c5e8) (currently a hidden setting).
---
### Author:  [@hello-smile6](https://meta.discourse.org/u/hello-smile6)
#### Post date: [22 באוקטובר, 2023, 11:02pm UTC](https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259/35 "2023-10-22T23:02:14Z")
I just enabled the site setting and added a passkey to my account on a forum I help run, and this seems to work perfectly. To enable it early on a site, this should work:
```plaintext
cd /var/discourse
./launcher enter app
rails c
SiteSetting.experimental_passkeys=true
```
Once it’s enabled, it seems like you just have to open [https://forum.example.com/my/preferences/security](https://forum.example.com/my/preferences/security) and add a passkey, then log out and use the `Login with a passkey` option to log back in.
---
### Author:  [@pmusaraj](https://meta.discourse.org/u/pmusaraj)
#### Post date: [22 באוקטובר, 2023, 11:11pm UTC](https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259/36 "2023-10-22T23:11:55Z")
Hey folks, yes, we’ve merged a few PRs adding passkeys support and are already testing it internally.
The steps above are correct, if you’d like to be a very very early tester of the feature. We are still fine-tuning a few things, though, and an official update/announcement is coming soon.
---
### Author:  [@pmusaraj](https://meta.discourse.org/u/pmusaraj)
#### Post date: [26 באוקטובר, 2023, 4:11pm UTC](https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259/37 "2023-10-26T16:11:17Z")
Another update here before making an official announcement: **passkeys are now enabled here on meta**. Please try them out and report any issues as replies in this topic.
Our plan is to keep testing the feature for another week or so under the experimental flag. Then we will announce them officially and remove the experimental site setting (i.e. passkeys support will be enabled by default on all instances using local logins).
---
### Author:  [@Arkshine](https://meta.discourse.org/u/Arkshine)
#### Post date: [26 באוקטובר, 2023, 4:50pm UTC](https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259/38 "2023-10-26T16:50:37Z")
I tested it on Desktop (windows 11, Chrome), and it works perfectly! 👍
I had to hit _Send Password Reset Email_ to confirm my identity because I usually log in with Google, so I don’t know my password. 😅
* * *
I tested on Android (10) and Chrome/App. It works well, however:
- Touching the input triggers the passkey modal.
- Ignoring and touching the input again allows me to type
- Touching the button does nothing (apart from selecting it and closing the keyboard)
(yay, it’s laggy, not sure why)
---
### Author:  [@pmusaraj](https://meta.discourse.org/u/pmusaraj)
#### Post date: [27 באוקטובר, 2023, 5:34pm UTC](https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259/39 "2023-10-27T17:34:17Z")
Thanks for the report @Arkshine, I had forgotten to include a small change in the mobile component in a commit two days ago. Kind of an embarrassing mistake, the button did nothing on all mobile devices.
Anyhow, it’s fixed now, I just tested on my Android, and it should work for you as well.
---
### Author:  [@Arkshine](https://meta.discourse.org/u/Arkshine)
#### Post date: [27 באוקטובר, 2023, 5:41pm UTC](https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259/40 "2023-10-27T17:41:05Z")
Yep, it’s working now, thanks! 😄
---
### Author:  [@hello-smile6](https://meta.discourse.org/u/hello-smile6)
#### Post date: [27 באוקטובר, 2023, 5:42pm UTC](https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259/41 "2023-10-27T17:42:28Z")
It seems like a chromeos system can’t be used as a passkey with Discourse (although it can be used as one with other websites), is that intentional?
---
### Author:  [@pmusaraj](https://meta.discourse.org/u/pmusaraj)
#### Post date: [27 באוקטובר, 2023, 5:44pm UTC](https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259/42 "2023-10-27T17:44:22Z")
We’re not specifically blocking it, no. What’s a “chromeos system”, exactly, is it Chrome on ChromeOS? Can you share the browser and OS version?
---
### Author:  [@hello-smile6](https://meta.discourse.org/u/hello-smile6)
#### Post date: [27 באוקטובר, 2023, 5:46pm UTC](https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259/43 "2023-10-27T17:46:23Z")
> [@pmusaraj](#):
>
> What’s a “chromeos system”, exactly, is it Chrome on ChromeOS?
Yes.
> [@pmusaraj](#):
>
> Can you share the browser and OS version?
Sure.
From chrome://version:
| Key | Value |
| --- | --- |
| Google Chrome | 118.0.5993.86 (Official Build) (64-bit) |
| Revision | d9a55e23605b9c433d369a305c71114843ec754d-refs/branch-heads/5993@{#1287} |
| Platform | 15604.45.0 (Official Build) stable-channel octopus |
| User Agent | Mozilla/5.0 (X11; CrOS x86\_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 |
Is that enough information?
---
### Author:  [@hello-smile6](https://meta.discourse.org/u/hello-smile6)
#### Post date: [27 באוקטובר, 2023, 5:48pm UTC](https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259/44 "2023-10-27T17:48:53Z")
Here’s what happens when I try to add a passkey using this computer (I choose the “This Device” option in the first menu):
---
### Author:  [@pmusaraj](https://meta.discourse.org/u/pmusaraj)
#### Post date: [27 באוקטובר, 2023, 5:56pm UTC](https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259/46 "2023-10-27T17:56:26Z")
Ah, interesting, thanks for the screenshot. I suspect the device doesn’t support user verification? Can you use touch/faceId or a PIN to unlock the device?
Per [this page](https://passkeys.dev/device-support/), it does look like Chrome OS support is patchy.
---
### Author:  [@hello-smile6](https://meta.discourse.org/u/hello-smile6)
#### Post date: [27 באוקטובר, 2023, 5:59pm UTC](https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259/47 "2023-10-27T17:59:01Z")
> [@pmusaraj](#):
>
> I suspect the device doesn’t support user verification?
I think it does.
> [@pmusaraj](#):
>
> Can you use touch/faceId or a PIN to unlock the device?
I use a password. It might be worth noting that I can add this device as a 2FA method to an account using webauthn, I just can’t add it as a passkey.
[Previous page](https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259.md?page=1)
[Next page](https://meta.discourse.org/t/support-passwordless-login-with-passkeys/229259.md?page=3)