Repository navigation
Passwordless login without having to type username #41191
Description
Hello,
Currently login with WebAuthn requires typing your username.
It's not always convenient.
It would be nice to have an option to authenticate using a passkey without having to type your username.
Obviously, the passkey must require user verification/PIN to be used in such way.
Thanks!
Reacted by Thore Göbel, Rene 'Renne' Bartsch, Rinkana, Be, Richard, Michel Le Bihan, mrRo8o7, Lukas Arnold, guillaumedsde, SinBirb and 4 more
Reacted by Rinkana, Martiño Rivera-Dourado, CVan and gguest2021
Activity
[-][Feature request] Passwordless login without having to type username[/-][+]Passwordless login without having to type username[/+]tushev commentedon Nov 21, 2023
See also #41599 (comment)
MrRinkana commentedon Feb 22, 2024
I second this, residential keys as default is how it should be done, with 2fa bypassed if such a key is used (see #21215).
This gives combined first and second factor, with a very nice login-flow, especially considering the combined 2fa.
Non-residential keys are nice, but the login flow is not the best since you still have to enter your username.
Non-residential without pin should be disabled unless explicitly enabled trough a warning (unless the key is used for 2fa only).
gguest2021 commentedon Dec 24, 2024
Please someone help me configure nextcloud so that it only asks me for login via webauth without typing user and password
MrRinkana commentedon Apr 9, 2025
@gguest2021 To ask questions like that use the forums: help.nextcloud.com; github is for feature requests, bug reports and discussion about them - not where one asks for help. Secondly this issue is not about disabling or hiding password login, it's about supporting residential credentials in securitykeys/passkeys..
That said, I'm not familiar with any configuration option for your purpose. You could probably add some Javascript that "clicks" the "login with device" button at first load, but it would need to be added every time nc updates.. People in the forums might have better ideas!
tushev commentedon Dec 18, 2025
#57140
#57154
golemusu commentedon Mar 9, 2026
Not sure if these are bugs or by design but as it is related I write here.
The beaty of well designed passkey login is that when you click username field in web-screen where is username and password fields it automatically recognizes that a passkey is saved to your device, there comes a popup which gives option to use it. One more click, then your PIN and you are logged in to service. Of course there must be option to cancel passkey login in the popup as in some rare situations you might want to use traditional username+password login.
Anyway current state is that you first have to click "log in with a device" button, which is unneeded click. After that you have to write username which is also unnecessary as browser+OS should recognize automatically that passkey exists.
After this there comes 2FA screen: TOTP or Security Key. I do have set up 2FA but I want it only for situations where I am logging with username+password. I am not saying that someone would not want passkey + 2FA but I'd say that it is unusual as passkey is so much more secure that 2FA become unnecessary in most use cases. And this seems to be almost defacto in many services which use passkeys.
This week I've logged 10-20 times to Nextcloud web and used TOTP, it would really made things much faster if there is "two-clicks+PIN and you are inside" type of login (or "two-clicks + biometrics if your device has biometric alternative).