- Home
- Forum
-
Mods NEW
- Featured
-
Social SMF 2.1
- SMFPacks Shoutbox Pro SMF 2.1
- SMFPacks Social Login SMF 2.1
- SMFPacks Emoji Picker SMF 2.1
- SMFPacks Reactions Mod SMF 2.1
- SMFPacks Social Profile SMF 2.1
- SMFPacks Conversations SMF 2.1
- SMFPacks Activity Stream Pro SMF 2.1
- SMFPacks Social Groups SMF 2.1
- SMFPacks Mentions Pro
- SMFPacks Alerts Pro
- SMFPacks Likes Pro
- SMFPacks Invitations System
- Content
- Productivity SMF 2.1
- Themes
- Packs
- Support
- Client Area
LATEST VERSION: 1.0.2 (2026-08-19)
Passkeys Pro
Passkeys (WebAuthn) are the most secure way to sign in to your SMF forum: phishing-resistant, passwordless login with Face ID, Touch ID, Windows Hello and hardware security keys.
Free Compatibility Test
Not sure if passkeys will work on your forum? Install this free package to check your server and browser before buying.
Passwordless sign-in with passkeys! New
Let your members sign in with Face ID, Touch ID, Windows Hello or a hardware security key instead of a password. Passkeys are phishing-resistant, can't be reused across sites and there is nothing to remember or type. Click the image to watch the full Face ID login flow!
A passkey button on every login form
The "Sign in with a passkey" button appears on the login page, the AJAX login overlay, the failed-login retry page and the guest kick page. A theme-agnostic fallback keeps it working even on themes without the template edits, so it works everywhere out of the box.
Members manage their own passkeys
Members register and manage their passkeys from Profile > Passkeys: add multiple devices, label each one and remove the ones they no longer use. Admins can also open the same area on any member's profile to help them out.
Go fully passwordless with passkey-only sign-in
Members can turn on passkey-only sign-in to disable their password entirely, making their account immune to password leaks, guessing and phishing.
Safe, admin-mediated account recovery
If a member with passkey-only sign-in loses their passkeys, they can request help and the administrators are notified by email (and so is the member, so unrequested attempts are noticed). An administrator verifies the request and re-enables password login from the member's profile. Recovery never self-completes via an emailed link, so a compromised inbox can't silently downgrade an account.
Serious WebAuthn security under the hood
The mod validates the WebAuthn challenge, origin, RP ID hash, user presence, ES256 assertion signatures and authenticator counters. Credentials are stored as opaque credential IDs and public keys — no passwords or secrets a database leak could expose.
Emergency kill switch for peace of mind
Locked out? A single line in Settings.php disables passkey sign-in and lifts passkey-only enforcement so every account can sign in with its password again, while the profile area stays available so members can fix their passkeys. Remove the line and everything is back — credentials and settings are kept.
Translated to multiple languages
Ships with Spanish (Spain), Spanish (Latin America), French, German and Italian translations, each with a UTF-8 variant, on top of English.
Easy installation
Install it through the SMF Package Manager: integration hooks keep source edits minimal and the passkeys action keeps working even when guest access is disabled. Requires SMF 2.1.x, HTTPS and PHP with OpenSSL — our free companion package tells you whether passkeys will work on your forum before you buy.
