this post was submitted on 23 Aug 2025
38 points (97.5% liked)

Open Source

40428 readers
247 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 6 years ago
MODERATORS
 

VoidAuth is a self-hosted Single Sign-On solution that aims to be easy to setup and use while feeling seamless to your users. Release v1.1.0 brings a few new features I have been working on and am excited about:

  • Passkey-only Users, the option on sign-up to use a passkey instead of a password.
  • Admin Notification Emails, so admins know when they have new tasks such as user registrations to approve.
  • Approval Emails for New Users, so new users awaiting approval know when they have been.
  • DEFAULT_REDIRECT back to your main page for invitations, logouts, etc.
  • and more!
you are viewing a single comment's thread
view the rest of the comments
[โ€“] vort3@lemmy.ml 8 points 1 week ago (1 children)

So pretty much same as ssh/gpg private/public keys? Do many websites support this? I don't remember seeing any that would give me an option to register using passkeys. Also, where are the private keys stored? How do I move them from device to device (for example, I signed up on android and now want to log in on desktop)? Do I back them up and restore when I'm buying a new phone?

[โ€“] Penta@lemmy.world 8 points 1 week ago* (last edited 1 week ago)

A lot of the bigger players like Microsoft, Google and Apple support it. For small sites its a lot rarer. The keys are stored on device, but can be synced in a variety of ways, often using the cloud. There is problems with vendor lock in vecause of that, even though passkeys are an open standard by themselves. Generally nothing is stopping you from copying/synching them yourself.