Enabling Hardware Key Login

WebAuthn / FIDO2 security keys

Edit admin/config.php and set the relying party ID:

$WEBAUTHN_RP_ID = 'nortonshop.net';

Enables security key and passkey login. The RP ID is set to the registrable domain (nortonshop.net) so credentials work across all subdomains, including auth.nortonshop.net (where login happens) and admin.nortonshop.net. Requires HTTPS (localhost works for testing).

YubiKey OTP

Get a free API key from https://upgrade.yubico.com/getapikey/, then add to admin/config.php:

$YUBICO_CLIENT_ID = '12345';
$YUBICO_SECRET_KEY = 'your-secret-key-here';