Safari 16 removes the "Enable Syncing Platform Authenticator" option from the developer menu.
Apple released the following:
In October, support for passkeys will come to macOS Monterey and macOS Big Sur, as well as macOS Ventura and iPadOS.
You can visit Safari 16 Release Post for more information.
To verify that your browser supports WebAuthn prior to setting Passkeys, please visit: https://webauthn.me/browser-support.
Setting Passkeys
To set up Passkeys on your site, you will want to enable the feature by going to Security -> Settings -> Features -> Login Security.
Next, you will navigate to Security -> Settings -> Configure -> Login Security -> Passwordless Login, ensure the Passkey checkbox is enabled, and save the changes.
Then, go to Security -> Settings -> User Groups and enable the "Enable Passwordless Login" in your preferred User Groups.
Once you have enabled Passkeys, you can go to your WordPress Admin Menu -> Users -> Profile and scroll down to Passwordless Login, enable the feature for the user, and click on "Setup Passkeys."
Note: If you are on a Mac, please ensure your computer has either Apple Silicon or the T1/T2 chip. For more information on Mac devices, please click here.
Press "Add Passkey" to register your device.
A pop-up will appear, follow its instructions.
Multi-Platform / Browser / QR Code
What if you want to log in to your WordPress site using a passkey, but you are using a computer you don't own or that you aren't logged into iCloud with? You can log into the site using the QR code method and the mobile device that is registered. This feature uses the passkey saved to your device / iCloud to allow you to gain access.
On the device you want to log into, look for the iPhone / Android device option. Then, point your camera at the QR code being displayed and click the option on the screen to use your passkey.
This will set up a mechanism for the computer and your mobile device to securely communicate with each other. After approving the login on your phone, you'll be signed in automatically on your desktop. The desktop computer does not get its own passkey. Your passkey stays on the device that you used to authenticate. If you are using a new Windows computer that you purchased, you would probably want to register a new passkey for that device after signing in for the first time via your iPhone.
Note: While the Safari UI says any iOS device running 15.4 or later is compatible, this does require the Syncing Platform Authenticator option to be enabled on your iPhone. You can click here for more information on enabling this feature on your iPhone.
Additional Information
- Passkeys are not available on multisite.
- Passkeys don't care if you are in Incognito or Private browsing modes. You can use the same passkey you've already registered.
- Your Face ID / Touch ID / Computer password is never sent to the website you are logging in with. They are only used to "unlock" your passkey locally. Your passkey is also never sent to the website you are logging in with.
- Apple has said these features will be launching in macOS 13 and iOS 16, but this isn't a guarantee.
- Apple's Security page for passkeys
Warning: In order to use the new features, please ensure your site is updated to PHP 7.3 or higher. Need help with updating your PHP? Click here for instructions.