EP Passkeys
EP Passkeys replaces passwords with passkeys: the WebAuthn standard that backs Face ID, Touch ID, Windows Hello, and physical security keys. Users register their device once, then log in with a biometric or tap instead of a password. Phishing-resistant by design.
Published by ElmsPark Studio.
Overview
Section titled “Overview”Why passkeys:
- No password to steal, forget, or phish. The private key never leaves the user’s device.
- Biometric convenience. Face ID, Touch ID, or Windows Hello on modern devices.
- Cross-device. Passkeys sync via iCloud Keychain, Google Password Manager, or 1Password.
- Phishing-resistant. Passkeys bind to the domain, so a phishing site can’t capture them.
Status
Section titled “Status”Version 0.3. Core flows work in development. Public install is blocked on a PageMotor core change that has not yet shipped.
Requirements
Section titled “Requirements”- PageMotor 0.8.2b or later
- EP Suite base class
- HTTPS required — WebAuthn does not work over plain HTTP.
- Modern browser — Chrome, Firefox, Safari, Edge (recent versions).
Installation
Section titled “Installation”Not currently available for install. EP Passkeys depends on a PageMotor core change that has not yet shipped. Installation steps will be published here once the core change lands.
User flow
Section titled “User flow”Registering a passkey
Section titled “Registering a passkey”- User logs in with their existing password (if set up first time) or passkey (if already registered).
- Goes to their account page.
- Clicks Register a new passkey.
- Device prompts for biometric or PIN.
- Passkey is saved on the device and registered with your site.
Logging in with a passkey
Section titled “Logging in with a passkey”- User visits the login page.
- Clicks Log in with passkey.
- Device prompts for biometric.
- They’re in.
Integrations
Section titled “Integrations”- EP Membership. When both are installed, member login supports passkeys.
- EP Ecommerce Subscriptions. Self-service portal can be gated behind passkey auth.
- EP Assistant. Admin chat can use passkey-authenticated sessions.
Troubleshooting
Section titled “Troubleshooting”“Register passkey button doesn’t appear”
Section titled ““Register passkey button doesn’t appear””Check you’re on HTTPS. WebAuthn is blocked on HTTP.
“Device prompt opens but registration fails”
Section titled ““Device prompt opens but registration fails””Check browser console for errors. Common cause: site domain doesn’t match what was registered. If you change domain after registering, passkeys break.
“I lost my device, I can’t log in”
Section titled ““I lost my device, I can’t log in””Passkeys on the lost device are gone. If you had a backup method (password, second device, recovery email), use it. If not, admin can reset the user from the database.
“Passkeys don’t sync across my devices”
Section titled ““Passkeys don’t sync across my devices””Syncing depends on the platform (iCloud, Google, etc.) and the device’s settings. This plugin doesn’t control syncing.
Feedback and corrections
Section titled “Feedback and corrections”For a quick question about this plugin, EP Support inside your admin is the fastest option. The chat widget sits on every EP plugin settings page and knows which one you’re on, with starter questions and links preloaded for that exact screen.
For anything bigger — a bug report, a feature request, or a “how do I…” that needs a real reply — open a ticket at help.elmspark.com. A real person, helped by AI, writes the reply. Usually within a few hours. Tickets don’t disappear into the void.