Skip to content

#1041 Implement biometric authentication for mobile web users #568

Description

@vic-Gray

Area: frontend · Effort: M

What: Allow mobile web users to authenticate using WebAuthn biometrics (fingerprint, Face ID) as a faster alternative to password entry.

Why: Password entry on mobile is friction-heavy and a leading cause of session abandonment. Biometric authentication removes this friction entirely.

Acceptance Criteria:

  • Users can register a biometric credential from their security settings
  • Subsequent logins offer the biometric option if a credential is registered
  • Falls back to password if biometric fails or is unavailable
  • Registered credentials are visible and revocable in the session management dashboard

Hints:

  • Use the @simplewebauthn/browser and @simplewebauthn/server libraries
  • Store public keys in a webauthn_credentials table
  • Biometric is available on iOS Safari (14+) and Chrome for Android (67+)

Metadata

Metadata

Assignees

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions