#7765 closed defect (bug) (reported-upstream)
Passkey work in chrome but not in firefox
Reported by: | kallookoo | Owned by: | |
---|---|---|---|
Milestone: | Priority: | normal | |
Component: | WordPress.org Site | Keywords: | |
Cc: |
Description
After enabling two-factor in my profile and activating the passkey with the touch ID when I try to log in with Firefox it does not show the Mac popup to be able to use Touch ID. I rule out a configuration error as I have tried different Firefox profiles and settings, also if I log in with Chrome it works perfectly.
Change History (6)
#2
@
4 weeks ago
I've added an upstream issue on the WordPress.org 2FA repo to track whether we should add an additional notice to the login screen for Mac + Firefox
: https://github.com/WordPress/wporg-two-factor/issues/314
#4
follow-up:
↓ 5
@
4 weeks ago
I understand what you say and I will follow the issue on github, as it is really related to the plugin, but I clarify that firefox does support Touch ID, as I personally use it on GitHub and of course on apple's own website.
Regards
#5
in reply to:
↑ 4
@
4 weeks ago
Replying to kallookoo:
I understand what you say and I will follow the issue on github, as it is really related to the plugin, but I clarify that firefox does support Touch ID, as I personally use it on GitHub and of course on apple's own website.
Interesting.. I did not realise this had changed, and Googling didn't tell me otherwise, Sorry about that!
I can confirm, that with Firefox 130.0 (64-bit)
- WordPress.org: I can't login with my existing Touch ID key
- WordPress.org: I can setup a new Firefox Touch ID key
- WordPress.org: I can't login with that Firefox Touch ID key
- GitHub: I can't login with my existing Touch ID key (from Chrome)
- GitHub: I can create a new iCloud Passkey, that then allows login
I'll edit the Github ticket and complete this there.
Hi!
Unfortunately Firefox on Mac does not support Touch ID, this is not something that WordPress.org can support as it's a browser/OS limitation, rather than a code issue.
Only Chrome and Safari can currently use Apple Touch ID.
For WordPress.org 2FA with Mac + Firefox, you should either use a) Auth App (which could be 1Password or other such managers that support TOTP, if you don't wish to use a mobile app) or b) A supported hardware key (Such as a yubikey, google titan, nitrokey, trustkey, solokeys, or any other FIDO2 compatible key) or c) a Recovery/Backup code.
I'm closing this as
invalid
as there's not actually anything broken here from the WordPress.org perspective, although the user-experience is definitely not ideal.If you have an idea of how to communicate this kind of scenario to a user, please do comment with a suggestion, we'll see it and if appropriate re-open/implement it.
Mozilla tracking issue:
https://bugzilla.mozilla.org/show_bug.cgi?id=1536482