v0.2 feat: passkey (WebAuthn) support via better-auth passkey plugin

[gitcoder89431]

Feature — Passkeys (WebAuthn / FIDO2)

Better Auth ships a first-party passkey plugin. Passkeys are the biggest UX win you can add to an auth server in 2026 — no password, no TOTP codes, just biometrics or hardware key. Browser support is universal.

Server setup

import { passkey } from 'better-auth/plugins'

export const auth = betterAuth({
  plugins: [
    passkey({
      rpName: 'Vibe Auth',
      rpID: process.env.BETTER_AUTH_URL
        ? new URL(process.env.BETTER_AUTH_URL).hostname
        : 'localhost',
    }),
  ],
})

Client setup (vibe_client)

import { passkeyClient } from 'better-auth/client/plugins'

export const authClient = createAuthClient({
  plugins: [passkeyClient()],
})

// Register
await authClient.passkey.addPasskey()
// Sign in
await authClient.signIn.passkey()

UX considerations

• Add "Add passkey" button to user security settings (alongside 2FA from v0.2 feat: add TOTP / 2FA support via better-auth twoFactor plugin #13)
• Show registered passkeys list with friendly names (device name + date)
• Allow deleting individual passkeys
• Passkey sign-in should be the primary CTA on the sign-in page, with email/password as secondary

Mobile note

For Expo/React Native users, there's a community plugin expo-better-auth-passkey that wraps the web plugin for iOS, macOS, and Android.

References

• https://better-auth.com/docs/plugins/passkey
• https://better-auth.com/docs/plugins/community-plugins