Quick Start 

This guide gets you from installation to your first passkey login in five minutes.

Prerequisites 

  • TYPO3 13.4 LTS or 14.1+ with HTTPS
  • Composer-based installation

Step 1: Install 

composer require netresearch/nr-passkeys-fe
vendor/bin/typo3 extension:activate nr_passkeys_be
vendor/bin/typo3 extension:activate nr_passkeys_fe
vendor/bin/typo3 database:updateschema
Copied!

Step 2: Include TypoScript 

In your site's root TypoScript record, add:

@import 'EXT:nr_passkeys_fe/Configuration/TypoScript/setup.typoscript'
@import 'EXT:nr_passkeys_fe/Configuration/TypoScript/constants.typoscript'
Copied!

Then set the page UIDs for your login and management pages:

plugin.tx_nrpasskeysfe.settings.loginPageUid = 42
plugin.tx_nrpasskeysfe.settings.managementPageUid = 43
plugin.tx_nrpasskeysfe.settings.enrollmentPageUid = 44
Copied!

Step 3: Add plugins to pages 

Create three pages in your TYPO3 page tree:

  1. Login page (e.g. UID 42): Add the content element Plugin > Passkeys Frontend Authentication > Login. This is your passkey login page.
  2. Management page (e.g. UID 43): Add Plugin > Passkeys Frontend Authentication > Management. Restrict access to logged-in frontend users only.
  3. Enrollment page (e.g. UID 44): Add Plugin > Passkeys Frontend Authentication > Enrollment. Used for the post-login interstitial. Can be the same as the management page.

Step 4: Configure the site 

Add the following to your site's config.yaml:

settings:
  nr_passkeys_fe:
    rpId: 'your-domain.example'
    origin: 'https://your-domain.example'
    enforcementLevel: 'encourage'
    enrollmentPageUrl: '/passkey-setup'
Copied!

Replace your-domain.example with your actual domain.

Step 5: Log in with a passkey 

  1. Visit your login page (e.g. /login).
  2. Click Sign in with a passkey.
  3. If you have no passkey yet, you will be prompted to create one.
  4. Follow the browser's passkey creation dialog (TouchID, Windows Hello, security key, etc.).
  5. After enrollment, click Sign in with a passkey again. The browser will present your passkey. Authenticate with the biometric prompt.

Next steps