FAQ

Do customers still need a password? Yes, the account keeps its password; a passkey is an extra, faster way in. Losing a phone never locks anyone out.

Which devices work? Every current browser with passkeys: Safari (iPhone, iPad, Mac with Face ID or Touch ID), Chrome and Edge (Windows Hello, Android, Google Password Manager), Firefox, and FIDO2 security keys. Older browsers do not see the button.

Can a customer use the passkey on another device? Synced passkeys (iCloud Keychain, Google Password Manager) appear on the customer’s other devices automatically. Browsers can also use a phone nearby by QR code. Otherwise add a passkey on each device.

Does it change the checkout? No. The button is also on the sign-in step of the checkout; guests check out as before.

What happens when I install Login Security: 2FA & Passkeys? Passkey Login steps back while the full product is active: no second button and no own pages. On the first admin page its passkeys are handed over (same data), so customers keep signing in with them through the full product. A note on Customers > Passkey sign-in shows the result and can hand them over again. Switch the full product off and Passkey Login is back with its own passkeys.

Does it work with the full page cache of CS-Cart 4.21? Yes. The button is the same for every visitor; sign-in runs through JavaScript POST requests.

Is any data sent to a third party? No. Passkeys are verified on your server; the store keeps only the public key, the name and dates.

Still stuck?

Work through the troubleshooting guide, then contact support with your CS-Cart version, edition, PHP version and the add-on version (1.0.0).