Configuration

Add-ons > Passkey Login > Settings

Setting	Default	Meaning
Enable passkey sign-in	on	Master switch: button, autofill and the Passkeys page. Off: existing passkeys are kept but not accepted.
Passwordless passkey sign-in on the storefront	on	The button and autofill on the storefront sign-in forms.
Passkey sign-in in the admin and vendor panel too	off	The button on the admin (and vendor panel) sign-in form and the My passkeys page for administrators.
Store name shown in the passkey prompt	company name	The relying-party name customers see when they create a passkey.
Passkey user verification	Preferred	Required: the device must check a fingerprint, face or PIN when it adds a passkey. Passwordless sign-in always requires it.
Refuse passkeys whose signature counter goes back	on	Detects cloned security keys (authenticators that report a counter). Synced passkeys (iCloud, Google) report 0 and are not affected.
E-mail users about security changes	on	E-mail when a passkey is added or removed.
Keep the security log for (days)	90	Older passkey log entries are removed.

The passkey domain is the storefront host (on CS-Cart Ultimate each storefront has its own passkeys). A passkey created on www.example.com works on www.example.com only, so keep one host per storefront (redirect the other).

Licence: when the license is not valid the button and autofill are hidden and no new passkeys can be added; passwords keep working for everyone.