About Django OTP WebAuthn¶

Django OTP WebAuthn is an implementation of WebAuthn Passkeys for Django applications. It extends the django-otp framework to support multi-factor authentication using passkeys.

Django OTP WebAuthn simplifies passkey authentication by handling all cryptographic operations through py_webauthn.

Features¶

Django OTP WebAuthn comes with the following built-in features:

  • Passkeys as a second-factor authentication: Users can verify their identity by approving a browser prompt after entering their password.

  • Passwordless login: Users can authenticate without a password using biometrics, a security key, or another trusted device. You can disable this feature if you want to use Django OTP WebAuthn as second-factor authentication.

  • Frontend included: Comes with a default frontend JavaScript implementation that works out of the box.

  • Flexible frontend: Developers can style the provided user interface to match their brand or implement a fully custom frontend using the provided API views.

  • Strict Content Security Policy (CSP) compatibility: The frontend implementation doesn’t rely on inline scripts and is compatible with strict CSP settings.

Compatibility¶

Django OTP WebAuthn is compatible with the following versions:

  • Django >= 4.2

  • Python >= 3.10

  • django-otp >= 1.4.0

Browser support¶

Django OTP WebAuthn works with most modern browsers that support WebAuthn passkeys, including:

  • Google Chrome 67+

  • Mozilla Firefox 60+

  • Apple Safari 13+

  • Microsoft Edge 18+

For a complete list of supported browsers, see Web Authentication API support on caniuse.com.

What next?¶

Ready to dive in?

Head over to the Getting started section to learn about passkeys and how to integrate Django OTP WebAuthn into your Django project.