ASP.NET Core 8.0 - Users Without Passwords Project
From the beginning of online accounts, we had passwords. Then we got “I forgot my password”. Password recovery processes were developed to reduce support fatigue. The most popular recovery mechanism is a link with a password reset token sent to the user by email. Then we got “I didn’t get the email”. To help mitigate email delivery issues, the online account registration process required a confirmed email address before access is granted. This discourages users from registering because they fear their email address will be sold, stolen, shared, or abused by email spammers. If passwords are removed, the email address can become optional.
The Users Without Passwords Project (UWPP) is the source code for UsersWithoutPasswords .Com. The UWPP is developed with Visual Studio 2022 and the MS Long Term Support (LTS) version .NET 8.0 framework. The UWPP implements WebAuthn, also known as FIDO2, instead of passwords. Windows Hello implements authentication with an IR webcam for facial recognition, a fingerprint scanner, or just by setting up and using a PIN. See Learn about Windows Hello and set it up.
The UWPP was initially developed back in 2021 with framework .NET 5.0. Version 2.x of the project integrated the ASP.NET Core 6.0 - Homegrown Analytics Project and implements multiple email addresses per user. I enabled the nullable context and mitigated all warnings and issues. See Nullable reference types. The World Wide Web Consortium (W3C) is working on the next API specification for accessing Public Key Credentials. The W3C Working Draft, dated 27 January 2025 is published at Web Authentication: An API for accessing Public Key Credentials Level 3. The latest Editors Draft is published at Editor’s Draft, 13 August 2025. The UWPP V4 supports these new requirements. The Attestation (registration) and Assertion (authentication) processes have been updated and commented to meet the new specification. New properties are added to the Passkey (credential) and the PasskeyChallenge (audit) records. I updated the Passkey and PasskeyChallenge UI. I added Ed25519 algorithm and Discoverable Credential support. The latest version of the UWPP is published at UsersWithoutPasswords .Com. The project supports multiple FIDO2 authenticators. Users can self-manage authenticators in Manage Account. Admins can list users, authenticators, and histories.
V4.0.0 - MIT License - $10 Access Fee - UsersWithoutPasswordsProject@4.0.0.zip - 25,394,622 bytes
Not accepting new comments.
Your comment has been submitted.
You will be emailed when approved.
Submit your comment. Comments are moderated.
DisplayedName - Member Since ?
Change Log
-- Updated MS NuGet Packages@9.0.8
-- Updated Microsoft.Bcl.Memory@9.0.8
-- Updated Hangfire NuGet Packages@1.8.21
-- Updated LigerShark.WebOptimizer.Core@3.0.471
-- Updated SignalR.js@9.0.6
-- Updated Analytics Chart.js@4.5.0
-- Updated Passkey properties for Level 3 API
-- Updated PasskeyChallenges properties for Level 3 API
-- Updated Attestation process for Level 3 API
-- Updated Assertion process for Level 3 API
-- Updated Passkey and PasskeyChallenge UI
-- Updated AuthenticatorSelection properties
-- Updated FIDO Metadata Json
-- Updated dynamic-modals.js
-- Implemented AndroidKey Attestation
-- Implemented Discoverable Credential support
-- Bug fixes
v3.1.12 - 2025-07-11
-- Updated MS NuGet Packages@8.0.18
-- Updated MailKit NuGet Package@4.13.0
-- Updated Bootstrap@5.3.7
-- Updated Bootstrap-Icons@1.13.1
-- Updated BootstrapeNative@5.1.5
-- Updated dbip-country-lite-2025-06.mmdb
-- Implemented FIDO Metadata Lookup
-- Implemented Microsoft.Bcl.Memory
-- Implemented Ed25519 algorithm support
-- Implemented LigerShark.WebOptimizer.Core
-- Removed BuildBundlerMinifier
-- Removed Azure.Identity
-- Removed Authentication.JwtBearer
-- Removed KHAuthenticator support
-- Bug fixes
v3.1.11 - 2025-06-13
-- Updated MS NuGet Packages@8.0.17
-- Updated MailKit NuGet Package@4.12.1
-- Updated Hangfire NuGet Packages@1.8.20
-- Updated Passkey and PasskeyChallenge UI
-- Bug fixes
v3.1.10 - 2025-05-14
-- Updated Azure.Identity@1.14.0
-- Updated MS NuGet Packages@8.0.16
-- Updated MailKit NuGet Package@4.12.0.0
-- Updated MaxMind.Db@4.2.0
-- Updated NSec.Cryptography@25.4.0
-- Updated AndroidSafetynet X509Certificate IssuerName
-- Updated Analytics Chart.js@4.4.1
-- Restored Development environment variable
v3.1.9 - 2025-04-09
-- Updated MS NuGet Packages@8.0.15
-- Removed Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation
v3.1.8 - 2025-03-14
-- Updated MS NuGet Packages@8.0.14
-- Updated MailKit NuGet Package@4.11.0.0
-- Updated Google Recaptcha functions
v3.1.7 - 2025-02-28
-- Updated MS NuGet Packages@8.0.13
-- Updated Hangfire NuGet Packages@1.8.18
-- Updated BootstrapeNative@5.1.2
-- Updated KHAuthenticator Authenticate Login process
v3.1.6 - 2025-02-05
-- Updated Azure.Identity@1.13.2
-- Updated MS NuGet Packages@8.0.12
-- Updated MailKit NuGet Package@4.10.0.0
v3.1.5 - 2024-12-31
-- Updated MailKit NuGet Package@4.9.0.0
-- Updated Hangfire NuGet Packages@1.8.17
v3.1.4 - 2024-11-14
-- Updated MS NuGet Packages@8.0.11
-- Updated Azure.Identity@1.13.1
-- Updated Hangfire NuGet Packages@1.8.15
v3.1.3 - 2024-10-18
-- Updated MS NuGet Packages@8.0.10
-- Updated Azure.Identity@1.13.0
-- Updated MailKit NuGet Package@4.8.0.0
v3.1.2 - 2024-08-15
-- Updated MS NuGet Packages@8.0.8
-- Updated MailKit NuGet Package@4.7.1.1
-- Updated PeterO.Cbor NuGet Package@4.5.5
-- Updated BootstrapeNative@5.0.13
v3.1.1 - 2024-07-15
-- Updated MS NuGet Packages@8.0.7
-- Updated MailKit NuGet Package@4.7.1
-- Updated Remember Me function
v3.1.0 - 2024-06-20
-- Updated Azure.Identity@1.12.0
-- Updated MS NuGet Packages@8.0.6
-- Updated MailKit NuGet Package@4.6.0
-- Updated Hangfire NuGet Packages@1.8.14
-- Updated BootstrapeNative@5.0.12
-- Updated AdminIdleLogout feature
-- Renamed Credentials to Passkeys
-- Updated Preferred UA Queries
-- Updated Utilities UI
v3.0.0 - 2024-05-03
-- Migrated to .NET 8.0
-- Mitigated all Errors, Warnings, and Messages
-- Updated dbip-country-lite-2024-03.mmdb
-- Updated MailKit NuGet Package@4.5.0
-- Updated Hangfire Packages@1.8.12
-- Updated NSec.Cryptography@24.4.0
v2.0.22 - 2024-03-20
-- Updated MS NuGet Packages@6.0.28
-- Updated MailKit NuGet Package@4.4.0
-- Updated Hangfire Packages@1.8.11
-- Updated Bootstrap@5.3.3
-- Updated Bootstrap-Icons@1.11.3
-- Updated KH Authenticator Banner
v2.0.21 - 2024-02-08
-- Added www rewrite url rule
-- Updated Vulnerable Transitive NuGet Packages
-- Updated MS NuGet Packages@6.0.27
-- Updated MailKit NuGet Package@4.3.0
-- Updated Hangfire NuGet Packages@1.8.10
-- Updated PeterO.Cbor NuGet Package@4.5.3
-- Updated MaxMind.Db@4.1.0
-- Updated Bootstrap@5.3.2
-- Updated Bootstrap-Icons@1.11.2
-- Updated KHAuthenticator Support
-- Streamlined Login Process
v2.0.20 - 2023-10-12
-- Updated MS NuGet Packages@6.0.23
-- Updated Admin AppUsers Index
v2.0.19 - 2023-09-13
-- Implemented IdentityErrorDescriber
-- Implemented Contact page
-- Updated MS NuGet Packages@6.0.22
-- Updated MailKit NuGet Package@4.2.0
-- Updated validation-native.js@1.1.1
-- Updated Registration process
-- Updated Terms of Service
-- Added KHAuthenticators Toggle
-- Added Malta Country Name
v2.0.18 - 2023-08-18
-- Updated Hangfire Packages@1.8.5
-- Updated IP to Country Lite database
-- Implemented Project Packaging
v2.0.17 - 2023-08-09
-- Updated MS NuGet Packages@6.0.21
-- Updated Bootstrap@5.3.1
-- Updated BootstrapIcons@1.10.5
v2.0.16 - 2023-07-27
-- Updated Hangfire Packages@1.8.4
-- Updated MS NuGet Packages@6.0.20
v2.0.15 - 2023-07-10
-- Updated Hangfire Packages@1.8.3
-- Updated MailKit NuGet Package@4.1.0
-- Updated MS NuGet Packages@6.0.19
v2.0.14 - 2023-06-14
-- Updated MS NuGet Packages@6.0.18
-- Updated AppVersion audit
v2.0.13 - 2023-06-05
-- Code cleanup
v2.0.12 - 2023-05-26
-- Updated Hangfire Packages@1.8.2
-- Updated KHAuthenticator Schema
v2.0.11 - 2023-05-02
-- Updated Hangfire Packages@1.8.0
-- Updated MailKit NuGet Package@4.0.0
-- Updated LoginWithKHAuthenticator
v2.0.10 - 2023-04-19
-- Implemented Admin Email Confirmation
v2.0.9 - 2023-04-16
-- Updated Audit Log Types
v2.0.8 - 2023-04-12
-- Updated MS NuGet Packages@6.0.16
-- Updated Hangfire Packages@1.8.0-rc3
-- Updated Provider Version Validation
v2.0.7 - 2023-04-06
-- Privacy Policy Update
v2.0.6 - 2023-04-05
-- Code Cleanup
v2.0.5 - 2023-04-02
-- Implemented Login Authenticate
v2.0.4 - 2023-03-30
-- Implemented Provider Service SecurityHash
v2.0.3 - 2023-03-29
-- Implemented Developer Sandbox
v2.0.2 - 2023-03-14
-- Updated MS NuGet Packages@6.0.15
v2.0.1 - 2023-03-12
-- Updated MailKit NuGet Package@3.6.0
-- Updated Unconfirmed EmailAddress
v2.0.0 - 2023-03-10
-- Integrated HomeGrownAnalytics
-- Integrated KHAuthenticators
-- Implemented API and SignalR
-- Implemented JWT Authentication
-- Implemented AppUser Email Addresses
-- Converted SecurityStamps ToBase64String
-- Verified MS SQL Server 2022 Support
Comments(0)