Passwordless Authentication with Passkeys in KEYCLOAK

September 2, 2025

Tags: #keycloak #passwordless #authentication #passkeys #fido2 #webauthn #video

It has been possible for a quite long time to authenticate with FIDO2/WebAuthn in Keycloak. But the user experience (UX) was very bad, as the user had to click several buttons and also had to enter a username.

Starting with KEYCLOAK 26.4 (in my demo I’m using 26.3 with preview feature) this has changed a lot, as Keycloak makes now use of the so called “WebAuthn Conditional Ul” - this makes it possible for a user to use either legacy username/password OR the new and shiny Passkeys directly on the login form, without having to mess around with various screens and forms.

Check out the video to learn everything about it!

Don’t forget to subscribe to my YouTube channel!

Example sourcecodes (even if they are not used in this video) are available on my GitHub repository:
dasniko/keycloak-extensions-demo - GitHub

Du bist auf der Suche nach Keycloak Beratung, Unterstützung, Workshops oder Trainings?

Nimm Kontakt mit mir auf!

« MFA via Email & SMS is NO proper MFA!!!