Passkey (Biometric) Security for WHMCS

Next-Generation Passwordless Authentication by eHostPK

The eHostPK Passkey Security module brings the future of cybersecurity directly to your WHMCS billing area. In an era where passwords are easily compromised, our module leverages the WebAuthn (FIDO2) protocol to allow your Clients and Admins to secure their accounts using device-native biometrics.

Whether it's Mac TouchID, iPhone FaceID, Windows Hello, or Android Fingerprint scanners, your users can now log in with a single touch—no passwords, no SMS OTPs, and no delays.

Key Benefits

Unbeatable Security: Moving beyond traditional 2FA, Passkeys are immune to phishing and credential stuffing.
Seamless User Experience: A lightning-fast 500ms auto-trigger prompt ensures a "Scan & Login" experience that feels native to the OS.
Maximum Privacy: Powered by AES-256-GCM encryption, ensuring all biometric credential IDs are stored with enterprise-grade protection.

Core Features

Passwordless Biometric Login: Full support for TouchID, FaceID, and Fingerprint sensors.
Cross-Platform Compatibility: Works on macOS, iOS, Android, and Windows (via Windows Hello).
Smart Multi-Session Detection: Intelligently handles separate sessions for WHMCS Admin and Client areas.
Dynamic Identity Display: Shows Full Name ( Email ) directly on the biometric prompt for clear identification.
Strict Security Layers: Built-in CSRF Protection and Origin Validation to prevent unauthorized API access.
Zero Dependencies: Purely native WebAuthn implementation with no external library requirements.
Seamless 2FA Integration: Works as a primary or secondary verification step within the WHMCS security framework.
One-Click Registration: Effortless device linking for both staff and customers.

Technical Specifications

Encryption: AES-256-GCM (OpenSSL)
Standard: WebAuthn / FIDO2
Compatibility: WHMCS 8.x & 9.x
Installation: Simple plug-and-play module structure.

There are no reviews yet!

Be the first to review Passkey (Biometric).

Version Compatibility

Compatible with WHMCS v9.0

Full Version Compatibility

Selected versions of WHMCS v9.0
9.0.0 - 9.0.2
All versions of WHMCS v8.13
All versions of WHMCS v8.12
All versions of WHMCS v8.11

System Requirements

HTTPS (SSL) Certificate is mandatory (WebAuthn requires a secure context).
Compatible with PHP 8.x
PHP OpenSSL Extension (For AES-256-GCM encryption).
Modern Web Browser (Chrome, Safari, Edge, or Firefox) with Biometric support.
WHMCS 8.11 or later.

* Requirements listed are in addition to the WHMCS default system requirements.

Support for this product

The best place to start if you need help with a specific product is to contact the developer. All WHMCS Marketplace developers have both a website and support URL listed.

Visit Website Contact Support

Developed By eHostPK Private Limited

Changelog

v1.0 Released March 25th, 2026

Latest Version

Version 1.0.0 - Initial Release (March 2026)

Initial Launch: Official release of the eHostPK Passkey (Biometric) Security module.
Core Support: Integrated WebAuthn (FIDO2) for native biometric authentication.
Security Engine: Implemented AES-256-GCM encryption for stored credential IDs.
Multi-Session: Added intelligent session detection for both WHMCS Admin and Client areas.
UX Optimization: Added a 500ms automatic biometric prompt trigger.
Path Compatibility: Full support for custom WHMCS installation folders and sub-directories.
CSRF Lockdown: Integrated security tokens for all authentication requests.