Native Support for Passkeys / 2fa

Using Django
1

It would be a huge step forward if the standard Django release included built-in support for Passkeys and 2FA.

Right now, relying on plain passwords for user and admin logins leaves projects exposed. Bots are constantly trying to guess passwords, and it only takes one weak account to cause serious problems.

Having first-class authentication options in Django by default would raise the security baseline for everyone in the community and make secure practices much easier to adopt. This feels like an area where Django could really lead by example.

1 Like
2

There’s an open issue on the “new features” repository about authentication improvements:

I think that would be a better place for large feature suggestions like this rather than the forum.