LARAVILT
Laravilt
页面 · Laravilt

Passkeys

Passwordless WebAuthn login with fingerprint, Face ID or hardware security keys.

Passkeys let users sign in with a fingerprint, Face ID, Windows Hello or a hardware security key instead of a password. Laravilt uses laragear/webauthn, which is installed with the auth package.

Enable in the panel

php

passkeys(?string $page = null, ?string $path = null) does two things:

  • It adds a Passkeys settings page (Laravilt\Auth\Pages\Profile\ManagePasskeys) where users register, name and delete passkeys.
  • It enables a "Sign in with passkey" option on the login page, backed by GET /{panel}/passkey/login-options and POST /{panel}/passkey/login.

Requirements

  • HTTPS (browsers allow plain HTTP only on localhost)
  • A browser with WebAuthn support (all current browsers)
  • The webauthn_credentials table, which is created by the auth migrations

Working with passkeys in code

php

Credentials are stored in webauthn_credentials and belong to the user through a polymorphic authenticatable relation. Private keys never leave the user's device. Only the public key is stored.

Events

PasskeyRegistered and PasskeyDeleted. See Events.