---
title: "Passkeys Backend Authentication"
manual: "Passkeys Backend Authentication"
version: "1.0"
permalink: "https://docs.typo3.org/permalink/netresearch/nr-passkeys-be:passkeys-backend-authentication@1.0"
source: "Index.rst"
start: true
rendered: "2026-09-20T16:07:13+00:00"
---

# Passkeys Backend Authentication {#passkeys-backend-authentication}

-   *Extension key:* nr_passkeys_be
-   *Package name:* netresearch/nr-passkeys-be
-   *Version:* release
-   *Language:* en
-   *Author:* Netresearch DTT GmbH
-   *License:*

    This document is published under the
    [GPL-2.0-or-later](https://www.gnu.org/licenses/gpl-2.0.html)
    license.

-   *Rendered:* today

---

Passwordless TYPO3 backend authentication via WebAuthn/FIDO2 Passkeys.
Enables one-click login with TouchID, FaceID, YubiKey, and Windows
Hello -- directly on the standard TYPO3 login form.

![TYPO3 login form with Sign in with a passkey button](Images/Login/LoginPageWithPasskey.png)

---

**[Introduction](https://docs.typo3.org/permalink/netresearch/nr-passkeys-be:introduction@1.0)**

Learn what the extension does, which authenticators and
browsers are supported, and see the full feature list.

**[Installation](https://docs.typo3.org/permalink/netresearch/nr-passkeys-be:installation@1.0)**

Install via Composer, activate the extension, and run the
database schema update.

**[Configuration](https://docs.typo3.org/permalink/netresearch/nr-passkeys-be:configuration@1.0)**

Configure relying party, challenge TTL, discoverable login,
rate limiting, account lockout, and cryptographic algorithms.

**[Deployment Scenarios](https://docs.typo3.org/permalink/netresearch/nr-passkeys-be:deployment-scenarios@1.0)**

Multi-environment setup, database sync, user onboarding, and
local development with DDEV.

**[Usage](https://docs.typo3.org/permalink/netresearch/nr-passkeys-be:usage@1.0)**

Register passkeys, log in with a single touch, and manage
your credentials in User Settings.

**[Administration](https://docs.typo3.org/permalink/netresearch/nr-passkeys-be:administration@1.0)**

Admin API for listing, revoking credentials and unlocking
locked-out accounts.

**[Enforcement](https://docs.typo3.org/permalink/netresearch/nr-passkeys-be:enforcement@1.0)**

Per-group passkey enforcement with grace periods,
admin dashboard, and gradual rollout support.

**[Developer Guide](https://docs.typo3.org/permalink/netresearch/nr-passkeys-be:developer-guide@1.0)**

Architecture overview, authentication service, controllers,
services, and how to run tests.

**[Security](https://docs.typo3.org/permalink/netresearch/nr-passkeys-be:security@1.0)**

WebAuthn security model, HMAC-signed challenges, rate
limiting, and user enumeration prevention.

**[Troubleshooting](https://docs.typo3.org/permalink/netresearch/nr-passkeys-be:troubleshooting@1.0)**

Common error messages, encryptionKey issues, HTTPS
requirements, and debug logging.

**[Changelog](https://docs.typo3.org/permalink/netresearch/nr-passkeys-be:changelog@1.0)**

Version history and release notes.