iThemes Security Passkeys Onboarding

Safari 16 removes the "Enable Syncing Platform Authenticator" option from the developer menu.

Apple released the following:
In October, support for passkeys will come to macOS Monterey and macOS Big Sur, as well as macOS Ventura and iPadOS.

Please visit Safari 16 Release Post for more information. 

To verify that your browser supports WebAuthn prior to setting Passkeys, please visit: https://webauthn.me/browser-support

Setting Passkeys

To set up Passkeys on your site, you will want to enable the feature by going to Security > Settings > Features > Login Security.

Screen_Shot_2022-08-16_at_2.43.45_PM.png

Next, you will navigate to the Security > Settings > Configure > Login Security > Passwordless Login, ensure the Passkey checkbox is enabled and save the changes. 

Screen_Shot_2022-08-16_at_2.39.33_PM.png

Once you have enabled Passkeys, you can go to your WordPress Admin Menu > Users > Profile and scroll down to Passwordless Login, enable the feature for the user, and click on "Setup Passkeys." 

Screen_Shot_2022-08-16_at_2.37.09_PM.png 

Note: If you are on a Mac, please ensure your computer has either Apple Silicon or the T1/T2 chip. For more information on Mac devices, please click here.  

Press “Add Passkey” to register your device.

Screen_Shot_2022-09-13_at_1.32.38_PM.png

A pop-up will appear, follow its instructions. 

Screen_Shot_2022-09-13_at_1.33.19_PM.png

Multi-Platform / Browser / QR Code

What if you want to login to your WordPress site using a passkey but you are using a computer you don't own or that you aren't logged into iCloud with? You can log into the site using the QR code method and the mobile device that is registered. This feature uses the passkey saved to your device / iCloud to allow you to gain access on .

On the device you want to log into,  look for the iPhone / Android device option. Then, point your camera at the QR code being displayed and click the option on screen to use your passkey.

Screen_Shot_2022-08-24_at_12.07.34_AM.pngIMG_6003.jpeg

This will set up a mechanism for the computer and your mobile device to securely communicate with each other. After approving the login on your phone, you'll be signed in automatically on your desktop. The desktop computer does not get its own passkey. Your passkey stays on the device that you used to authenticate. If you are using a new windows computer that you purchased, you would probably want to register a new passkey for that device after signing in for the first time via your iPhone.

Note: While the Safari UI says any iOS device running 15.4 or later is compatible, this does require the Syncing Platform Authenticator option to be enabled on your iPhone. Please click here for more information on enabling this feature on your iPhone. 

Additional Information

  • Passkeys are not available on multisites.
  • Passkeys don't care if you are in Incognito or Private browsing modes. You can use the same passkey you've already registered.
  • Your Face ID / Touch ID / Computer password is never sent to the website you are logging in with. They are only used to "unlock" your passkey locally. Your passkey is also never sent to the website you are logging in with.
  • Apple has said these features will be launching in macOS 13 and iOS 16, but this isn't a guarantee. 
  • Apple's Security page for passkeys

Warning: In order to use the new features, please ensure your site is updated to PHP 7.3 or higher. Not sure how to update your PHP? Click here for instructions. 

Have more questions? Submit a request
Powered by Zendesk