Appreciation for the great service + Feature Request: Passkey / FIDO2 support (Hardware tokens)

Hi everyone,

First of all, a huge thank you to the entire deSEC team for providing such an awesome, reliable, and privacy-friendly DNS service! It is an invaluable project and works exceptionally well.

As a small suggestion for improvement regarding account security, I would love to see Passkey / FIDO2 support (e.g., for hardware security tokens like a Nitrokey, YubiKey, etc.) added as an alternative or addition to standard TOTP.

Since there are currently no backup codes provided for TOTP recovery, having hardware-based authentication or passkeys would be a fantastic, highly secure option and a great fallback mechanism.

Thanks again for your hard work and dedication to this project!

Best regards

ro011110ot

3 Likes

Hi @ro011110ot,

Thank you for your message, and welcome to deSEC! :slight_smile:

We’re tracking this feature here, and welcome pull requests: Extend 2FA with WebAuthn support · Issue #698 · desec-io/desec-stack · GitHub

Stay secure,
Peter

1 Like