🔐 A curated list of awesome WebAuthn and Passkey resources
-
Updated
Jul 2, 2026
Passkeys are a form of passwordless user authentication for websites and apps, that is designed to provide a high level
of security by leveraging public key infrastructure. Unlike passwords, no shared secret is exchanged between the user
and a service. Instead, the public key is sent to the server, while the private key is stored in the user’s device.
To verify the user’s identity, users can use biometric data, such as a fingerprints or facial recognition, instead of
relying on a user-generated password. This makes it much more difficult for attackers to gain unauthorized access to an
account, as passkeys are two-factor-authentication (2FA) by default. Concisely, they avoid a range of
password-based attacks, including phishing, by providing an additional layer of security.
🔐 A curated list of awesome WebAuthn and Passkey resources
🔐 multi factor authentication system (2FA, MFA, OTP, FIDO Server)
Single Sign-On Identity & Access Management via OpenID Connect, OAuth 2, PAM
WebAuthn ruby server library ― Make your Ruby/Rails web server become a conformant WebAuthn Relying Party
A simple PHP WebAuthn (FIDO2/Passkey) server library
[MOVED → github.com/stellar/passkey-kit] TypeScript SDK for Stellar passkey smart wallets — WebAuthn/secp256r1, Ed25519 & policy signers, keyless relayer submission
Password and passkey manager application for Android, compatible with ZX2C4's Pass command line application
Authentication plugin for Payload CMS
WebAuthn (Passkeys) library for .NET.
WebAuthn4J Extension for Spring Security
A Jellyfin plugin that adds native two-factor authentication (TOTP, email OTP) with trusted device tokens, TV device pairing, LAN bypass, and API key bypass. Server-side enforcement — works with all clients including web, mobile, TV, and service integrations like Sonarr/Radarr.
一款社区驱动的高速、稳定、安全的内网穿透、网络隔离、P2P传输、零信任网络ZTNA、堡垒机、异地组网SD-WAN,打破传统网络边界的Mesh网格网络安全产品。
🔒 WP-WebAuthn allows you to safely login to your WordPress site without password.
AspNetCore authentication library offering minimal API endpoints for cookie auth, JWTs, passkeys (WebAuthn), 2FA, password resets, and user management.