# Nextcloud webAuthn

**URL:** <https://help.nextcloud.com/t/nextcloud-webauthn/167804>\
**Category:** 📑 How to\
**Tags:** mfa, wiki, security, nextcloud, webauthn, installation, authentication\
**Created:** [August 8, 2023, 3:00pm UTC](https://help.nextcloud.com/t/nextcloud-webauthn/167804 "2023-08-08T15:00:56Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![SchBenedikt](https://help.nextcloud.com/user_avatar/help.nextcloud.com/schbenedikt/32/52761_2.png) [@SchBenedikt](https://help.nextcloud.com/u/SchBenedikt)\
**Post date:** [August 8, 2023, 3:00pm UTC](https://help.nextcloud.com/t/nextcloud-webauthn/167804/1 "2023-08-08T15:00:56Z")

</div>

Welcome to the Wiki. Enjoy this experiment where your posts here can be edited and expanded by others.  
You are responsible for the quality of your edits. ❤  
[This is the german tutorial for it.](https://technik.xn--schchner-2za.de/index.php/blog/2023/08/08/mit-webauth-in-nextcloud-einloggen/)  
In this guide we will show you today how to log into your Nextcloud with webAuth.

This means you no longer need a password to log into your cloud.

First of all we need to install the right app.

[App in the Nextcloud store](https://apps.nextcloud.com/apps/twofactor_webauthn)

The app is called Two-Factor WebAuthn and is installed quite quickly.  
 ![WebAuthn Anleitung Nextcloud](https://help.nextcloud.com/uploads/default/original/3X/2/1/218db714dcea69bb4f68500e14ad4b2bfbbe20fb.png)

To configure it we go to this URL:

“_`https://nextcloud.yourcloud.tld/index.php/settings/user/security`_”

“_`nextcloud.yourcloud.tld`_” must be replaced with your own Nextcloud domain.

Going further down, we already see that we can set up authentication without a password.

 ![WebAuthn Anleitung Nextcloud (1)](https://help.nextcloud.com/uploads/default/original/3X/a/0/a06ebee26162ccd1c08d931c35505419b7452701.png)

Here we tap on “Add WebAuthn device”

This is where our face is then scanned - assuming you have a supported camera. Most of the time he asks the face twice.

Then comes the dialog that it was successful.

As a last step we have to assign a name and we’re done!

In order to be able to use this tool, we have to tap “Log in with a device” when logging in.

 ![WebAuthn Anleitung Nextcloud (2)](https://help.nextcloud.com/uploads/default/original/3X/7/a/7a7b3a0a39c6e54bfb642651cf9e7b1078291f42.png)

 ![image](https://help.nextcloud.com/uploads/default/original/3X/8/f/8f2672365a197603f1fcffc005aeef1ba1e2db3d.jpeg)

Here we then type in the username and we are asked for the face.

If you have any questions or problems, feel free to write them back in the comments!

---

<div class="post-metadata">

**Author:** ![tflidd](https://help.nextcloud.com/letter_avatar/tflidd/32/5_5575768a8748004e209b776fc1b2916d.png) [@tflidd](https://help.nextcloud.com/u/tflidd)\
**Post date:** [July 20, 2025, 9:29am UTC](https://help.nextcloud.com/t/nextcloud-webauthn/167804/2 "2025-07-20T09:29:18Z")

</div>

@SchBenedikt some of your images do not show, and opening them independently, an error is shown:

 ![grafik](https://help.nextcloud.com/uploads/default/original/3X/4/e/4e89fd1d8eb711d87a4eec25e574669adba73926.png)

Perhaps integrate the images directly…

> [@SchBenedikt](#):
>
> This is where our face is then scanned -

Without the snapshots, some information is perhaps missing. But not all WebAuthn devices have a camera? Wasn’t this the option for the U2F devices as well, where then they ask you to put the device in?

---

<div class="post-metadata">

**Author:** ![SchBenedikt](https://help.nextcloud.com/user_avatar/help.nextcloud.com/schbenedikt/32/52761_2.png) [@SchBenedikt](https://help.nextcloud.com/u/SchBenedikt)\
**Post date:** [July 20, 2025, 4:27pm UTC](https://help.nextcloud.com/t/nextcloud-webauthn/167804/3 "2025-07-20T16:27:25Z")

</div>

Thank you for your suggestion – and I think it works with U2F, too. I’ve now uploaded the images as is and no longer embedded them via a link.

---

<div class="post-metadata">

**Author:** ![tflidd](https://help.nextcloud.com/letter_avatar/tflidd/32/5_5575768a8748004e209b776fc1b2916d.png) [@tflidd](https://help.nextcloud.com/u/tflidd)\
**Post date:** [July 26, 2025, 10:06am UTC](https://help.nextcloud.com/t/nextcloud-webauthn/167804/4 "2025-07-26T10:06:56Z")

</div>

> [@SchBenedikt](#):
>
> Thank you for your suggestion – and I think it works with U2F, too.

So scanning your image is linked to a specific app or device?

---

<div class="post-metadata">

**Author:** ![bb77](https://help.nextcloud.com/letter_avatar/bb77/32/5_5575768a8748004e209b776fc1b2916d.png) [@bb77](https://help.nextcloud.com/u/bb77)\
**Post date:** [July 27, 2025, 10:42am UTC](https://help.nextcloud.com/t/nextcloud-webauthn/167804/5 "2025-07-27T10:42:31Z")

</div>

First, it’s important to distinguish between _passwordless login_ and _two-factor authentication (2FA)_ via WebAuthn.

For passwordless login, you **don’t** need the _Two-Factor WebAuthn_ app, because this functionality is already built into the Nextcloud core. So there’s no need to install any additional app.

As the name suggests, the _Two-Factor WebAuthn_ app is specifically for adding a WebAuthn device **as a second factor**. In that case, you first log in with your username and password, and then confirm your identity using the WebAuthn device.

Secondly, whether or not you can scan your face depends on the type of WebAuthn device you are using. My YubiKey doesn’t have a camera, so face scanning would be rather difficult! 😉
