PHPackages egroupware/webauthn - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. egroupware/webauthn ActiveEgroupware-app egroupware/webauthn =================== EGroupware WebAuthn authentication 26.7.20260724(2mo ago)030↑2600%EPLPHP Since Aug 29Pushed today3 watchersCompare [ Source](https://github.com/EGroupware/webauthn)[ Packagist](https://packagist.org/packages/egroupware/webauthn)[ Docs](https://www.egroupware.org/)[ RSS](/packages/egroupware-webauthn/feed)WikiDiscussions master Synced today READMEChangelogDependencies (2)Versions (132)Used By (0) WebAuthn for EGroupware ======================= [](#webauthn-for-egroupware) Adds [WebAuthn](https://www.w3.org/TR/webauthn/) (FIDO2/U2F) support to [EGroupware](https://github.com/EGroupware/egroupware) as a second authentication factor: security keys, passkeys, and platform authenticators (Touch ID, Windows Hello, Android biometrics) instead of, or in addition to, one-time codes. Built on [web-auth/webauthn-framework](https://github.com/web-auth/webauthn-framework), the reference PHP implementation of the standard. What is WebAuthn? ----------------- [](#what-is-webauthn) WebAuthn is a W3C/FIDO Alliance standard for authenticating with public-key cryptography instead of a shared secret. When you register an authenticator, it generates a key pair and gives the server only the public key; the private key never leaves the device (or its secure enclave/TPM). Logging in means signing a server-issued, single-use challenge with that private key - there is no shared secret to phish, replay, or leak from a server-side breach, and each credential is bound to the exact origin it was registered for, which also rules out look-alike phishing domains. What this app does ------------------ [](#what-this-app-does) - Adds a "WebAuthn / U2F tokens" section under **Preferences > Password & Security**, where users register one or more authenticators. - Once at least one token/passkey is registered, EGroupware requires a successful WebAuthn ceremony as a second factor after the regular password login (see the `multifactor_policy` hook). - Stores only the public key and metadata needed to verify future logins (`egw_webauthn_pubkeys`); the actual credential/private key stays on the user's authenticator. Requirements ------------ [](#requirements) - A browser with WebAuthn support (recent Chrome, Firefox, Edge, Safari). - An authenticator: a FIDO2/U2F security key, or a platform authenticator (Touch ID, Windows Hello, Android/Chrome biometrics). - HTTPS - WebAuthn requires a [secure context](https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts) (an exception is made for `localhost` during development). License ------- [](#license) GPL-2.0-or-later, see [LICENSE.md](LICENSE.md). ### Health Score 51 — FairBetter than 95% of packages Maintenance95 Actively maintained with recent releases Popularity10 Limited adoption so far Community11 Small or concentrated contributor base Maturity76 Established project with proven stability Bus Factor1 Top contributor holds 95.1% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Every ~19 days Recently: every ~0 days Total 130 Last Release 61d ago Major Versions 21.1.20210723 → 22.1.202209202021-08-03 21.1.20210923 → 23.1.202301252023-01-04 23.1.20240905 → 26.0.202512082024-11-21 23.1.20250506 → 26.0.202601082026-01-08 23.1.x-dev → 26.1.202601302026-01-30 ### Community Maintainers ![](https://www.gravatar.com/avatar/85a8407098a44193698887e739a263c1623a169548b3867103015d2b3c9eb78d?d=identicon)[ralfbecker](/maintainers/ralfbecker) --- Top Contributors [![ralfbecker](https://avatars.githubusercontent.com/u/972180?v=4)](https://github.com/ralfbecker "ralfbecker (39 commits)")[![hnategh](https://avatars.githubusercontent.com/u/9461589?v=4)](https://github.com/hnategh "hnategh (1 commits)")[![nathangray](https://avatars.githubusercontent.com/u/10407710?v=4)](https://github.com/nathangray "nathangray (1 commits)") ### Embed Badge ![Health badge](/badges/egroupware-webauthn/health.svg) ``` [![Health](https://phpackages.com/badges/egroupware-webauthn/health.svg)](https://phpackages.com/packages/egroupware-webauthn) ``` ### Alternatives [craftcms/cms Craft CMS 3.6k3.6M3.2k](/packages/craftcms-cms)[statamic/cms The Statamic CMS Core Package 4.8k3.6M1.0k](/packages/statamic-cms)[spatie/laravel-passkeys Use passkeys in your Laravel app 472890.7k40](/packages/spatie-laravel-passkeys)[jeffgreco13/filament-breezy A custom package for Filament with login flow, profile and teams support. 1.0k2.1M67](/packages/jeffgreco13-filament-breezy)[contao/core-bundle Contao Open Source CMS 1231.6M2.8k](/packages/contao-core-bundle)[web-auth/webauthn-symfony-bundle FIDO2/Webauthn Security Bundle For Symfony 66529.9k11](/packages/web-auth-webauthn-symfony-bundle) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)