Making WordPress.org

Opened 3 months ago

Closed 3 months ago

Last modified 3 months ago

#7765 closed defect (bug) (reported-upstream)

Passkey work in chrome but not in firefox

Reported by: kallookoo's profile kallookoo Owned by:
Milestone: Priority: normal
Component: WordPress.org Site Keywords:
Cc:

Description

After enabling two-factor in my profile and activating the passkey with the touch ID when I try to log in with Firefox it does not show the Mac popup to be able to use Touch ID. I rule out a configuration error as I have tried different Firefox profiles and settings, also if I log in with Chrome it works perfectly.

Change History (6)

#1 @dd32
3 months ago

  • Resolution set to invalid
  • Status changed from new to closed

Hi!

Unfortunately Firefox on Mac does not support Touch ID, this is not something that WordPress.org can support as it's a browser/OS limitation, rather than a code issue.

Only Chrome and Safari can currently use Apple Touch ID.

For WordPress.org 2FA with Mac + Firefox, you should either use a) Auth App (which could be 1Password or other such managers that support TOTP, if you don't wish to use a mobile app) or b) A supported hardware key (Such as a yubikey, google titan, nitrokey, trustkey, solokeys, or any other FIDO2 compatible key) or c) a Recovery/Backup code.

I'm closing this as invalid as there's not actually anything broken here from the WordPress.org perspective, although the user-experience is definitely not ideal.

If you have an idea of how to communicate this kind of scenario to a user, please do comment with a suggestion, we'll see it and if appropriate re-open/implement it.

Mozilla tracking issue:
https://bugzilla.mozilla.org/show_bug.cgi?id=1536482

#2 @dd32
3 months ago

I've added an upstream issue on the WordPress.org 2FA repo to track whether we should add an additional notice to the login screen for Mac + Firefox: https://github.com/WordPress/wporg-two-factor/issues/314

#3 @dd32
3 months ago

  • Resolution changed from invalid to reported-upstream

#4 follow-up: @kallookoo
3 months ago

I understand what you say and I will follow the issue on github, as it is really related to the plugin, but I clarify that firefox does support Touch ID, as I personally use it on GitHub and of course on apple's own website.

Regards

#5 in reply to: ↑ 4 @dd32
3 months ago

Replying to kallookoo:

I understand what you say and I will follow the issue on github, as it is really related to the plugin, but I clarify that firefox does support Touch ID, as I personally use it on GitHub and of course on apple's own website.

Interesting.. I did not realise this had changed, and Googling didn't tell me otherwise, Sorry about that!

I can confirm, that with Firefox 130.0 (64-bit)

  • WordPress.org: I can't login with my existing Touch ID key
  • WordPress.org: I can setup a new Firefox Touch ID key
  • WordPress.org: I can't login with that Firefox Touch ID key
  • GitHub: I can't login with my existing Touch ID key (from Chrome)
  • GitHub: I can create a new iCloud Passkey, that then allows login

I'll edit the Github ticket and complete this there.

#6 @kallookoo
3 months ago

It was solved, see the plugin repo. I comment it here for future related searches.

Note: See TracTickets for help on using tickets.