Passwordless authentication in Flutter with Firebase

630 Views Asked by At

I've been looking in to passwordless authentication methods for my app for the simplest singup experience possible and I'm a little confused.
Ideally I want something that works on both android and iOS (masOS would be appreciated), but I can always use a platform specific method

I stumbled across this article https://developers.google.com/identity/passkeys but I am a little skeptical.
In the example app they show, passkeys seem to be used as an alternative sign in method, with normal email + password still being an option

So my questions are as follows: Is this stable enough to be used as your primary authentication method and is this safe to use in production yet?

...should I just go with simple email link verification instead?

2

There are 2 best solutions below

1
iluvsoup On BEST ANSWER

Settled on email link auth
Passkeys seems a little too bleeding-edge, at least right now

1
Justpass-M On

For your mobile app authentication flow, can implement passkeys as

1- an auto-sign in; i.e. loading the app would trigger the biometric authentication modal where user would use their passkey to log in.

2- Single factor, where user action such as a sign-in button that could be passwordless

3- 2nd factor authentication, where you could layer a password/OTP based login flow with a passkey authentication.
To address this issue, we have developed a firebase extension for passkeys called justpass.me. It is a very simple and powerful way to enable passwordless biometric authentication into your Firebase web and mobile apps.

please take a look at this extension where you can integrate passkeys into Firebase and flutter in few easy steps.