WGS Passkey Authentication WHMCS Module

[WGS]

We’ve just launched Passkey Authentication for WHMCS, a module designed to bring modern, passwordless authentication to both WHMCS clients and administrators.

Key features:

• Passkey Authentication – Secure, passwordless login using supported devices and authentication methods.
• Client & Administrator Support – Protect both WHMCS client accounts and admin accounts.
• Microsoft Entra ID – Allow users to authenticate with their Microsoft account.
• Faster Login Experience – Reduce dependence on traditional passwords and make sign-in simpler.
• Additional Account Security – Add another layer of protection to accounts containing customer, service and billing information.
• Modern Device Support – Works with supported iPhone/iPad, Android, Windows, macOS devices and FIDO2 security keys.

The goal is to make WHMCS authentication more secure without making the login experience more complicated for users.

We’ve added more details and screenshots on the module page:
https://whmcsglobalservices.com/passkey-whmcs-module/

 

Would be interested to hear how other WHMCS providers are currently handling passwordless authentication and MFA for their client portals.

 

Edited September 7 by WGS

[slim]

This really should be core WHMCS functionality. 

[WGS]

On 9/8/2026 at 8:31 AM, slim said:

This really should be core WHMCS functionality. 

Agreed. Passkey authentication would be a very useful addition to the WHMCS core, especially as passwordless authentication is becoming more widely adopted.

We’ve added this functionality through our Passkey Authentication Module for those who want to use it in WHMCS today.

[Hostek]

I can only agree.
We are testing it now and it looks really good and simple.

[WGS]

1 hour ago, Hostek said:

I can only agree.
We are testing it now and it looks really good and simple.

Thank you for sharing your feedback! Really glad to hear that the testing is going well and that you’re finding it simple to use.

We’d appreciate any feedback you have as you continue testing it. It helps us improve the module further.

[WGS]

Passkey Authentication Module v1.1.0 Released

We’ve released a new version with several security, authentication, and admin improvements.

Highlights:

• Added mojeID integration

• Added full module access for selected admin roles

• Improved admin login analytics and login method tracking

• Strengthened authentication validation

• Fixed Microsoft account linking security issue

• Improved admin re-authentication validation

• Fixed access to disabled login methods through direct URLs

• Improved Passkey RP ID validation with exact matching

The update is focused on improving authentication security, admin access control, and overall reliability.

More details: https://whmcsglobalservices.com/whmcs-modules/passkey-authentication/

[WGS]

Passkey Authentication Module v1.1.1 Released

We’ve released version 1.1.1 of our Passkey Authentication Module with several security improvements and tighter controls over passkey management.

What’s new in v1.1.1?

• Improved overall module security.

• Passkey registration during signup is now disabled. Customers can add a passkey only after signing in to their account using the same browser.

• Passkey management is restricted to the signed-in account.

• Passkey login is now restricted to active customers with verified email addresses.

These updates add an extra layer of protection and help ensure passkeys are managed securely within each customer account.

More details: https://whmcsglobalservices.com/whmcs-modules/passkey-authentication/

Edited October 15 by WGS