Installation
Prerequisites
- TYPO3 13.4 LTS or TYPO3 14.1+
- PHP 8.2, 8.3, 8.4, or 8.5
netresearch/nr-passkeys-be^0.6 (installed automatically)- HTTPS is required for WebAuthn (except
localhostduring development) - A configured TYPO3 encryption key
(
$GLOBALS['TYPO3_CONF_VARS']['SYS']['encryptionKey'], minimum 32 characters)
Installation via Composer
This is the recommended way to install the extension:
composer require netresearch/nr-passkeys-fe
This also installs netresearch/nr-passkeys-be as a dependency.
Activate the extension
After installation, activate the extension in the TYPO3 backend:
- Go to Admin Tools > Extensions
- Search for "Passkeys Frontend Authentication"
- Click the activate button
Or use the CLI:
vendor/bin/typo3 extension:activate nr_passkeys_fe
Note
If nr_passkeys_be is not already active, activate it first.
Both extensions must be active for the frontend login to work.
Database schema update
The extension adds two tables:
tx_nrpasskeysfe_credential-- Frontend passkey credentialstx_nrpasskeysfe_recovery_code-- Bcrypt-hashed recovery codes
After activation, run the database schema update:
- Go to Admin Tools > Maintenance > Analyze Database Structure
- Apply the suggested changes
Or use the CLI:
vendor/bin/typo3 database:updateschema
Include TypoScript
Include the extension's TypoScript in your site configuration:
- Go to Site Management > TypoScript
- Edit your root TypoScript record
- Add the static template Passkeys Frontend Authentication (nr_passkeys_fe)
Or add it manually:
@import 'EXT:nr_passkeys_fe/Configuration/TypoScript/setup.typoscript'
@import 'EXT:nr_passkeys_fe/Configuration/TypoScript/constants.typoscript'
Add the plugins
Three frontend plugins are available. Add them to your pages as content elements:
- NrPasskeysFe:Login
- The passkey login form. Place on your login page. Supports both discoverable (usernameless) and username-first login.
- NrPasskeysFe:Management
- Self-service credential management. Place on a page accessible only to logged-in users.
- NrPasskeysFe:Enrollment
- Enrollment form used as the interstitial target. Required when enforcement is active.
See Quick Start for a step-by-step walkthrough.
Verify the installation
After activation:
- Visit the login page with the NrPasskeysFe:Login plugin. You should see a Sign in with a passkey button.
- The backend module Admin Tools > Passkey Management FE should appear.
Warning
HTTPS is mandatory for WebAuthn to function. The only exception
is localhost for local development. If TYPO3 is behind a
reverse proxy, ensure TYPO3_SSL or
[SYS][reverseProxySSL] is set correctly.