Passkeys support for Roundcube Webmail

I’ve been playing around with Claude Code (yes) on adding an easy way for having passkeys support in Roundcube webmail.

I believe that having that option available by default is a must in today’s world.

So, without further ado – here it is:

• https://github.com/mkerstner/roundcube-plugin-passkeys

Optional passwordless passkey (WebAuthn / FIDO2) authentication for Roundcube.

Each user may enrol one or more passkeys and then sign in without typing a password, using a fingerprint, face, device screen lock, or a hardware security key. Passkeys are strictly opt-in per user and are designed to coexist with the existing authentication features:

• The standard username/password login form keeps working unchanged.
• Any 2FA plugin keeps working — this plugin does not touch the password authenticate path.
• A user who never enrols a passkey sees no difference at all.

So, it should feature everything essential for a start. And being open source – feel free to extend and adapt.

Available on Packagist as well of course:

• https://packagist.org/packages/mkerstner/passkeys

Enjoy!