Passkey is a modern authentication module for WHMCS designed to strengthen the security of both administrator and client accounts. It adds an additional layer of protection to the login process, helping prevent unauthorized access and safeguarding sensitive account and billing information. Bring modern, passwordless authentication to your WHMCS environment with Passkeys and Microsoft Entra ID. Passkey provides clients and administrators with a faster, simpler, and more secure way to access their accounts using trusted authentication methods.
Passkey WHMCS Module
Passkey WHMCS Module adds modern passwordless authentication to WHMCS for both clients and administrators. Users can sign in using Passkeys, Face ID, Touch ID, Windows Hello, FIDO2 security keys, or Microsoft Entra ID without relying solely on traditional passwords.
Why Choose Passkey?
Every screen, before you buy
Client area and admin panel as your customers and staff will see them.
Passkey WHMCS Module Features
Passkey Authentication for WHMCS Clients
Allow clients to securely sign in to their WHMCS accounts using passkeys without entering passwords. Fast, simple, and protected by modern authentication standards.
Passkey Authentication for WHMCS Administrators
Add passwordless passkey login for WHMCS administrators to provide stronger protection for admin accounts and sensitive WHMCS data.
Microsoft Entra ID Authentication for WHMCS
Enable users to sign in to WHMCS using their Microsoft Entra ID credentials, providing a secure and convenient authentication option for clients and administrators.
WebAuthn & FIDO2 Authentication for WHMCS
Enable secure passwordless WHMCS authentication using WebAuthn and FIDO2, with support for security keys, biometrics, and trusted devices.
Confirm Password Using Passkey – Admin
For sensitive actions that normally require re-entering a password, admins can confirm instead with their registered passkey.
Reset Client Password Using Passkey
Customers who have registered a passkey can utilize it to reset their WHMCS account password. They can verify their identity with Passkey, making password recovery faster, easier, and more secure.
Passkey Enforcement & Security Policies
Give administrators greater control over account security by enforcing Passkey authentication for selected clients or administrators. Define authentication requirements and reduce reliance on traditional passwords across your WHMCS installation.
Rich Passkey Management Dashboard
Manage client and administrator Passkeys from a central dashboard. Quickly view registered devices and manage Passkey authentication across your WHMCS installation.
Dedicated Passkey Management for Customers
Give customers their own Passkey management page where they can view and manage their registered authentication devices without contacting support.
Complete Passkey Activity Logs
Track Passkey usage on the admin and client side, including when it was used, IP address, location, device, and authentication details for better security monitoring.
Manage Login Notification Emails
Allows administrators and clients to manage their own login notification settings and control which Passkey login alerts they want to receive.
Modern Authentication Methods
Support Passkeys, biometrics, Face ID, Touch ID, Windows Hello, security keys, and Microsoft Entra ID on compatible devices.
Your questions, our answers
Passkey is a WHMCS module that adds passwordless authentication for clients and administrators using Passkeys and supported device authentication methods.
Passkey authentication provides a secure, passwordless way for WHMCS clients and administrators to sign in using a trusted device, biometric authentication, or a compatible security key.
These are steps to registry Passkey:
1. Register a Passkey
Users register a Passkey from their WHMCS account using a supported device or security key.
2. Verify the User’s Device
The user’s device verifies their identity using biometrics, PIN, device authentication, or a compatible security key.
3. Authenticate Without a Password
During login, WHMCS verifies the Passkey without requiring the user to enter their traditional password.
4. Access the WHMCS Client or Admin Area
After successful authentication, the user securely accesses the WHMCS Client Area or Admin Area.
Yes. Passkey supports passwordless authentication for both the WHMCS client area and admin area.
Passkey supports Passkeys, fingerprint authentication, Face ID, Touch ID, Windows Hello, and compatible security keys.
Yes. Customers get a dedicated Passkey management page in their WHMCS client area where they can manage their registered authentication devices.
Yes. Super administrators can manage Passkeys and related features for clients and administrators.
Yes. Administrators can set a maximum number of Passkey devices that can be registered for an account.
Passkey logs can show authentication activity including when the Passkey was used, IP address, location, device, and related authentication details.
Yes. Both administrators and clients can manage their own login notification settings.
Staff administrators can manage their own Passkeys, while super administrators can access and manage all Passkey features and actions.
Yes. Administrators can use their registered Passkey to confirm supported sensitive actions instead of entering their password again.
Yes. Clients can use their registered Passkey to securely verify their identity and reset their WHMCS account password without relying only on traditional password recovery.
Yes. Passkey can work across supported devices and platforms, depending on the user’s Passkey provider, browser, operating system, and device configuration.
Passkeys are supported by modern versions of major browsers, including Google Chrome, Microsoft Edge, Apple Safari, and Mozilla Firefox, subject to browser and operating system support.
Passkeys work on most modern devices including Android devices, iPhone & iPad, FIDO2 Security Keys, Windows & macOS Devices.
Yes. Passkey supports compatible FIDO2/WebAuthn security keys, allowing users to authenticate with a physical security key.
Yes. Passkey is designed for WHMCS-based hosting businesses that want to provide customers with a modern, convenient passwordless login experience while giving administrators greater control over authentication management.
No. Passkey is an authentication module for WHMCS. It works with your existing WHMCS installation to add Passkey-based authentication and management capabilities.
Yes. Microsoft Entra ID authentication can be configured to provide secure sign-in for both the WHMCS Client Area and Admin Area.
Users can sign in using their Microsoft Entra ID account instead of entering their WHMCS password, depending on your configured authentication settings.
Yes. Authentication is handled through Microsoft Entra ID, allowing users to benefit from their organization’s existing security policies and authentication methods.
Microsoft Entra ID login allows clients and administrators to sign in to WHMCS using their Microsoft work or school account. It provides a convenient and secure authentication option without requiring users to manage a separate WHMCS password.