emailengine-app 2.65.0 → 2.67.0

package/translations/pl.po

@@ -1,7 +1,7 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: \n"
-"POT-Creation-Date: 2026-03-10 13:39+0000\n"
+"POT-Creation-Date: 2026-03-31 08:47+0000\n"
 "PO-Revision-Date: \n"
 "Last-Translator: \n"
 "Language-Team: \n"
@@ -11,15 +11,15 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=3; plural=(n==1 ? 0 : n%10>=2 && n%10<=4 && (n%100<12 "
 "|| n%100>14) ? 1 : 2);\n"
-"X-Generator: Poedit 3.8\n"
+"X-Generator: Poedit 3.9\n"
 
-#: views/error.hbs:4 workers/api.js:7043
+#: views/error.hbs:4 workers/api.js:7103
 msgid "Something went wrong"
-msgstr "Ups... Coś poszlo nie tak"
+msgstr "Ups... Coś poszło nie tak"
 
 #: views/error.hbs:6
 msgid "Error code: %s"
-msgstr "Kod bledu: %s"
+msgstr "Kod błędu: %s"
 
 #: views/error.hbs:14
 msgid "Go back"
@@ -29,13 +29,17 @@ msgstr "Wstecz"
 msgid "Dashboard"
 msgstr "Pulpit"
 
-#: views/config/license.hbs:45
+#: views/config/license.hbs:45 lib/routes-ui.js:2497
 msgid "%d day"
 msgid_plural "%d days"
 msgstr[0] "%d dzień"
 msgstr[1] "%d dni"
 msgstr[2] "%d dni"
 
+#: views/redirect.hbs:1
+msgid "Click <a href=\"%s\">here</a> to continue&mldr;"
+msgstr "Kliknij <a href=\"%s\">tutaj</a>, aby kontynuować&mldr;"
+
 #: views/unsubscribe.hbs:3 views/unsubscribe.hbs:62 views/unsubscribe.hbs:85
 msgid "Unsubscribe"
 msgstr "Wypisz się"
@@ -81,9 +85,33 @@ msgstr "Adres e-mail"
 msgid "Enter your email address"
 msgstr "Wprowadź swój adres e-mail"
 
-#: views/redirect.hbs:1
-msgid "Click <a href=\"%s\">here</a> to continue&mldr;"
-msgstr "Kliknij <a href=\"%s\">tutaj</a>, aby kontynuować&mldr;"
+#: views/oauth-scope-error.hbs:2
+msgid "Insufficient Permissions"
+msgstr "Niewystarczające uprawnienia"
+
+#: views/oauth-scope-error.hbs:8
+msgid ""
+"All requested permissions are required for this service to function properly. "
+"Some required permissions were not granted during sign-in."
+msgstr ""
+"Wszystkie wymagane uprawnienia są niezbędne do prawidłowego działania tej "
+"usługi. Niektóre z nich nie zostały przyznane podczas logowania."
+
+#: views/oauth-scope-error.hbs:12
+msgid "The following permissions were not granted:"
+msgstr "Nie przyznano następujących uprawnień:"
+
+#: views/oauth-scope-error.hbs:21
+msgid ""
+"Please try again and make sure all permission checkboxes are selected on the "
+"Google consent screen."
+msgstr ""
+"Spróbuj ponownie i upewnij się, że na ekranie zgody Google zaznaczone są "
+"wszystkie pola wyboru dotyczące uprawnień."
+
+#: views/oauth-scope-error.hbs:27
+msgid "Try Again"
+msgstr "Spróbuj ponownie"
 
 #: views/accounts/register/imap.hbs:11
 msgid "Your name"
@@ -107,6 +135,14 @@ msgstr "Wprowadź hasło do konta"
 msgid "Continue"
 msgstr "Kontynuuj"
 
+#: views/accounts/register/index.hbs:2
+msgid "Choose your email account provider"
+msgstr "Wybierz dostawcę konta e-mail"
+
+#: views/accounts/register/index.hbs:15
+msgid "Standard IMAP"
+msgstr "Standardowy IMAP"
+
 #: views/accounts/register/imap-server.hbs:19
 msgid "IMAP"
 msgstr "IMAP"
@@ -154,8 +190,8 @@ msgstr "TLS dla IMAP"
 
 #: views/accounts/register/imap-server.hbs:100
 msgid ""
-"TLS (also known as SSL) is usually only needed when using port 993. For "
-"other ports EmailEngine falls back to using STARTTLS based encryption."
+"TLS (also known as SSL) is usually only needed when using port 993. For other "
+"ports EmailEngine falls back to using STARTTLS based encryption."
 msgstr ""
 "TLS (znany również jako SSL) jest zwykle potrzebny tylko w przypadku "
 "korzystania z portu 993. W przypadku innych portów EmailEngine powraca do "
@@ -176,8 +212,8 @@ msgstr "TLS dla SMTP"
 
 #: views/accounts/register/imap-server.hbs:191
 msgid ""
-"TLS (also known as SSL) is usually only needed when using port 465. For "
-"other ports EmailEngine falls back to using STARTTLS based encryption."
+"TLS (also known as SSL) is usually only needed when using port 465. For other "
+"ports EmailEngine falls back to using STARTTLS based encryption."
 msgstr ""
 "TLS (znany również jako SSL) jest zwykle potrzebny tylko w przypadku "
 "korzystania z portu 465. W przypadku innych portów EmailEngine powraca do "
@@ -185,7 +221,7 @@ msgstr ""
 
 #: views/accounts/register/imap-server.hbs:209
 msgid "Verify connection"
-msgstr "Zweryfikuj polaczenie"
+msgstr "Zweryfikuj połączenie"
 
 #: views/accounts/register/imap-server.hbs:218
 msgid "Save and continue"
@@ -193,58 +229,50 @@ msgstr "Zapisz i kontynuuj"
 
 #: views/accounts/register/imap-server.hbs:226
 msgid "Skip verification"
-msgstr "Pomin weryfikacje"
+msgstr "Pomiń weryfikację"
 
 #: views/accounts/register/imap-server.hbs:241
 msgid "Connection test failed"
-msgstr "Test polaczenia nie powiodl sie"
+msgstr "Test połączenia nie powiódł się"
 
 #: views/accounts/register/imap-server.hbs:247
 msgid "We couldn't connect with these settings. Check the errors below."
-msgstr "Nie udalo sie polaczyc z tymi ustawieniami. Sprawdz bledy ponizej."
+msgstr "Nie udało się połączyć z tymi ustawieniami. Sprawdź błędy poniżej."
 
 #: views/accounts/register/imap-server.hbs:318
 msgid "Error"
-msgstr "Blad"
+msgstr "Błąd"
 
 #: views/accounts/register/imap-server.hbs:320
 msgid "Invalid settings"
-msgstr "Nieprawidlowe ustawienia"
+msgstr "Nieprawidłowe ustawienia"
 
 #: views/accounts/register/imap-server.hbs:326
 msgid "Couldn't connect to IMAP server"
-msgstr "Nie udalo sie polaczyc z serwerem IMAP"
+msgstr "Nie udało się połączyć z serwerem IMAP"
 
 #: views/accounts/register/imap-server.hbs:328
 #: views/accounts/register/imap-server.hbs:337
 msgid "Server response:"
-msgstr "Odpowiedz serwera:"
+msgstr "Odpowiedź serwera:"
 
 #: views/accounts/register/imap-server.hbs:335
 msgid "Couldn't connect to SMTP server"
-msgstr "Nie udalo sie polaczyc z serwerem SMTP"
+msgstr "Nie udało się połączyć z serwerem SMTP"
 
 #: views/accounts/register/imap-server.hbs:395
 msgid "Request failed."
-msgstr "Zadanie nie powiodlo sie."
-
-#: views/accounts/register/index.hbs:2
-msgid "Choose your email account provider"
-msgstr "Wybierz dostawcę konta e-mail"
-
-#: views/accounts/register/index.hbs:15
-msgid "Standard IMAP"
-msgstr "Standardowy IMAP"
+msgstr "Żądanie nie powiodło się."
 
-#: lib/routes-ui.js:523 lib/ui-routes/account-routes.js:60
+#: lib/routes-ui.js:384 lib/ui-routes/account-routes.js:60
 msgid "Delegated"
 msgstr "Delegowany"
 
-#: lib/routes-ui.js:524 lib/ui-routes/account-routes.js:61
+#: lib/routes-ui.js:385 lib/ui-routes/account-routes.js:61
 msgid "Using credentials from \"%s\""
 msgstr "Używanie poświadczeń z \"%s\""
 
-#: lib/routes-ui.js:574 lib/ui-routes/account-routes.js:111
+#: lib/routes-ui.js:435 lib/ui-routes/account-routes.js:111
 msgid ""
 "Connection timed out. This usually occurs if you are behind a firewall or "
 "connecting to the wrong port."
@@ -252,98 +280,106 @@ msgstr ""
 "Przekroczono limit czasu połączenia. Zwykle dzieje się tak, gdy użytkownik "
 "znajduje się za zaporą sieciową lub łączy się z niewłaściwym portem."
 
-#: lib/routes-ui.js:577 lib/ui-routes/account-routes.js:114
+#: lib/routes-ui.js:438 lib/ui-routes/account-routes.js:114
 msgid "The server unexpectedly closed the connection."
 msgstr "Serwer nieoczekiwanie zamknął połączenie."
 
-#: lib/routes-ui.js:580 lib/ui-routes/account-routes.js:117
+#: lib/routes-ui.js:441 lib/ui-routes/account-routes.js:117
 msgid ""
 "The server unexpectedly closed the connection. This usually happens when "
 "attempting to connect to a TLS port without TLS enabled."
 msgstr ""
-"Serwer nieoczekiwanie zamknął połączenie. Zwykle dzieje się tak podczas "
-"próby połączenia z portem TLS bez włączonego protokołu TLS."
+"Serwer nieoczekiwanie zamknął połączenie. Zwykle dzieje się tak podczas próby "
+"połączenia z portem TLS bez włączonego protokołu TLS."
 
-#: lib/routes-ui.js:585 lib/ui-routes/account-routes.js:122
+#: lib/routes-ui.js:446 lib/ui-routes/account-routes.js:122
 msgid ""
-"The server refused the connection. This typically occurs if the server is "
-"not running, is overloaded, or you are connecting to the wrong host or port."
+"The server refused the connection. This typically occurs if the server is not "
+"running, is overloaded, or you are connecting to the wrong host or port."
 msgstr ""
-"Serwer odmówił połączenia. Zwykle dzieje się tak, gdy serwer nie działa, "
-"jest przeciążony lub łączysz się z niewłaściwym hostem lub portem."
+"Serwer odmówił połączenia. Zwykle dzieje się tak, gdy serwer nie działa, jest "
+"przeciążony lub łączysz się z niewłaściwym hostem lub portem."
 
-#: lib/routes-ui.js:712
+#: lib/routes-ui.js:573
 msgid "Invalid API key for OpenAI"
 msgstr "Nieprawidłowy klucz API dla OpenAI"
 
-#: lib/routes-ui.js:4754 lib/routes-ui.js:4789 lib/routes-ui.js:4904
-#: lib/routes-ui.js:4951 lib/routes-ui.js:5198 lib/routes-ui.js:5234
-#: workers/api.js:2557 lib/ui-routes/account-routes.js:549
-#: lib/ui-routes/account-routes.js:585 lib/ui-routes/account-routes.js:702
-#: lib/ui-routes/account-routes.js:749 lib/ui-routes/account-routes.js:998
-#: lib/ui-routes/account-routes.js:1034
+#: lib/routes-ui.js:2490
+msgid "Unknown"
+msgstr "Nieznany"
+
+#: lib/routes-ui.js:2499
+msgid "Indefinite"
+msgstr "Na czas nieokreślony"
+
+#: lib/routes-ui.js:5133 lib/routes-ui.js:5168 lib/routes-ui.js:5283
+#: lib/routes-ui.js:5330 lib/routes-ui.js:5577 lib/routes-ui.js:5613
+#: workers/api.js:2279 workers/api.js:2607 lib/ui-routes/account-routes.js:554
+#: lib/ui-routes/account-routes.js:590 lib/ui-routes/account-routes.js:707
+#: lib/ui-routes/account-routes.js:754 lib/ui-routes/account-routes.js:1003
+#: lib/ui-routes/account-routes.js:1039
 msgid "Email Account Setup"
 msgstr "Konfiguracja konta e-mail"
 
-#: lib/routes-ui.js:4814 lib/routes-ui.js:4847 lib/routes-ui.js:7807
-#: lib/ui-routes/account-routes.js:610 lib/ui-routes/account-routes.js:644
+#: lib/routes-ui.js:5193 lib/routes-ui.js:5226 lib/routes-ui.js:8186
+#: lib/ui-routes/account-routes.js:615 lib/ui-routes/account-routes.js:649
 msgid "Invalid request. Check your input and try again."
 msgstr "Nie udało się zweryfikować argumentów żądania."
 
-#: lib/routes-ui.js:5007 lib/routes-ui.js:5018
-#: lib/ui-routes/account-routes.js:806 lib/ui-routes/account-routes.js:817
+#: lib/routes-ui.js:5386 lib/routes-ui.js:5397
+#: lib/ui-routes/account-routes.js:811 lib/ui-routes/account-routes.js:822
 #: lib/ui-routes/admin-entities-routes.js:2020
 msgid "Server hostname was not found"
 msgstr "Nie znaleziono nazwy hosta serwera"
 
-#: lib/routes-ui.js:5010 lib/routes-ui.js:5021
-#: lib/ui-routes/account-routes.js:809 lib/ui-routes/account-routes.js:820
+#: lib/routes-ui.js:5389 lib/routes-ui.js:5400
+#: lib/ui-routes/account-routes.js:814 lib/ui-routes/account-routes.js:825
 #: lib/ui-routes/admin-entities-routes.js:2023
 msgid "Invalid username or password"
 msgstr "Nieprawidłowa nazwa użytkownika lub hasło"
 
-#: lib/routes-ui.js:5024 lib/ui-routes/account-routes.js:823
+#: lib/routes-ui.js:5403 lib/ui-routes/account-routes.js:828
 #: lib/ui-routes/admin-entities-routes.js:2026
 msgid "Authentication credentials were not provided"
 msgstr "Nie podano danych uwierzytelniających"
 
-#: lib/routes-ui.js:5027 lib/ui-routes/account-routes.js:826
+#: lib/routes-ui.js:5406 lib/ui-routes/account-routes.js:831
 #: lib/ui-routes/admin-entities-routes.js:2029
 msgid "OAuth2 authentication failed"
 msgstr "Uwierzytelnianie OAuth2 nie powiodło się"
 
-#: lib/routes-ui.js:5030 lib/routes-ui.js:5034
-#: lib/ui-routes/account-routes.js:829 lib/ui-routes/account-routes.js:833
+#: lib/routes-ui.js:5409 lib/routes-ui.js:5413
+#: lib/ui-routes/account-routes.js:834 lib/ui-routes/account-routes.js:838
 #: lib/ui-routes/admin-entities-routes.js:2032
 #: lib/ui-routes/admin-entities-routes.js:2036
 msgid "TLS protocol error"
 msgstr "Błąd protokołu TLS"
 
-#: lib/routes-ui.js:5038 lib/ui-routes/account-routes.js:837
+#: lib/routes-ui.js:5417 lib/ui-routes/account-routes.js:842
 #: lib/ui-routes/admin-entities-routes.js:2040
 msgid "Connection timed out"
 msgstr "Przekroczono limit czasu połączenia"
 
-#: lib/routes-ui.js:5041 lib/ui-routes/account-routes.js:840
+#: lib/routes-ui.js:5420 lib/ui-routes/account-routes.js:845
 #: lib/ui-routes/admin-entities-routes.js:2043
 msgid "Could not connect to server"
 msgstr "Nie można połączyć się z serwerem"
 
-#: lib/routes-ui.js:5044 lib/ui-routes/account-routes.js:843
+#: lib/routes-ui.js:5423 lib/ui-routes/account-routes.js:848
 #: lib/ui-routes/admin-entities-routes.js:2046
 msgid "Unexpected server response"
 msgstr "Nieoczekiwana odpowiedź serwera"
 
-#: lib/routes-ui.js:7770 lib/tools.js:950
+#: lib/routes-ui.js:8149 lib/tools.js:950
 msgid "Invalid input"
 msgstr "Nieprawidłowe dane wejściowe"
 
-#: lib/routes-ui.js:7780 lib/routes-ui.js:7898 lib/routes-ui.js:7915
-#: lib/routes-ui.js:7951
+#: lib/routes-ui.js:8159 lib/routes-ui.js:8277 lib/routes-ui.js:8294
+#: lib/routes-ui.js:8330
 msgid "Subscription Management"
 msgstr "Zarządzanie subskrypcjami"
 
-#: workers/api.js:7042 workers/api.js:7159
+#: workers/api.js:7102 workers/api.js:7219
 msgid "Requested page not found"
 msgstr "Nie znaleziono żądanej strony"
 
@@ -364,10 +400,10 @@ msgid ""
 msgstr ""
 "Firma Microsoft wyłączyła logowanie oparte na hasłach (w tym hasłach "
 "aplikacji) dla kont e-mail w usługach Outlook.com, Hotmail.com i Microsoft "
-"365. Aby kontynuować, użyj przycisku \"Zaloguj się za pomocą Microsoft\", "
-"aby bezpiecznie połączyć swoje konto."
+"365. Aby kontynuować, użyj przycisku \"Zaloguj się za pomocą Microsoft\", aby "
+"bezpiecznie połączyć swoje konto."
 
-#: lib/ui-routes/account-routes.js:742 lib/ui-routes/account-routes.js:1027
+#: lib/ui-routes/account-routes.js:747 lib/ui-routes/account-routes.js:1032
 msgid "Couldn't set up account. Try again."
 msgstr "Nie udało się założyć konta. Spróbuj ponownie."
 

package/views/account/login.hbs

@@ -1,13 +1,13 @@
 <div class="text-center">
-    <h1 class="h4 text-gray-900 mb-4">Sign In to EmailEngine</h1>
+    <h1 class="h4 text-gray-900 mb-4">Sign in to EmailEngine</h1>
 </div>
-<form class="user" method="post" action="/admin/login" style="min-height: 14rem;">
+<form class="user" method="post" action="/admin/login">
     <input type="hidden" id="crumb" name="crumb" value="{{crumb}}" />
     <input type="hidden" name="next" value="{{values.next}}" />
 
     <div class="form-group">
         <input type="text" class="form-control form-control-user {{#if errors.username}}is-invalid{{/if}}"
-            id="exampleInputEmail" name="username" aria-describedby="emailHelp" placeholder="Enter your username"
+            id="loginUsername" name="username" placeholder="Username"
             value="{{values.username}}">
         {{#if errors.username}}
         <span class="invalid-feedback">{{errors.username}}</span>
@@ -15,40 +15,50 @@
     </div>
     <div class="form-group">
         <input type="password" class="form-control form-control-user {{#if errors.password}}is-invalid{{/if}}"
-            id="exampleInputPassword" name="password" placeholder="Enter your password">
+            id="loginPassword" name="password" placeholder="Password">
         {{#if errors.password}}
         <span class="invalid-feedback">{{errors.password}}</span>
         {{/if}}
     </div>
 
-    <div class="form-group">
-        <div class="custom-control custom-checkbox small">
-            <input type="checkbox" class="custom-control-input {{#if errors.remember}}is-invalid{{/if}}"
-                id="customCheck" name="remember" {{#if values.remember}}checked{{/if}}>
-            <label class="custom-control-label" for="customCheck">Keep me signed in</label>
-            {{#if errors.remember}}
-            <span class="invalid-feedback">{{errors.remember}}</span>
-            {{/if}}
-        </div>
-    </div>
+    <!-- Always enable persistent sessions; no UI toggle for now -->
+    <input type="hidden" name="remember" value="Y" />
     <div>
         <button type="submit" class="btn btn-primary btn-user btn-block">
-            Sign In
+            Sign in
         </button>
     </div>
+</form>
 
-    {{#if providers.okta}}
-    <hr>
-    <div>
-        <a href="/admin/login/okta" class="btn btn-primary btn-user btn-block">
-            Sign in with Okta SSO
-        </a>
-    </div>
-    {{/if}}
+{{#if passkeysAvailable}}
+<div class="d-flex align-items-center my-3">
+    <hr class="flex-grow-1">
+    <span class="px-3 text-muted small">or</span>
+    <hr class="flex-grow-1">
+</div>
+<div>
+    <button type="button" class="btn btn-primary btn-user btn-block" id="passkey-login-btn">
+        <i class="fas fa-fingerprint fa-sm fa-fw mr-2"></i>Sign in with a passkey
+    </button>
+    <div id="passkey-error" class="text-danger small mt-2 text-center" style="display:none;"></div>
+</div>
+{{/if}}
+
+{{#if providers.okta}}
+<div class="d-flex align-items-center my-3">
+    <hr class="flex-grow-1">
+    <span class="px-3 text-muted small">or</span>
+    <hr class="flex-grow-1">
+</div>
+<div class="mt-2">
+    <a href="/admin/login/okta" class="btn btn-primary btn-user btn-block">
+        <i class="fas fa-sign-in-alt fa-sm fa-fw mr-2"></i>Sign in with Okta SSO
+    </a>
+</div>
+{{/if}}
 
-</form>
 <hr>
 <div class="text-center">
     <a class="small" href="https://emailengine.app/reset-password" target="_blank" rel="noopener noreferrer"
         referrerpolicy="no-referrer">Forgot your password?</a>
-</div>
+</div>

package/views/account/password.hbs

@@ -16,9 +16,9 @@
             <h6 class="m-0 font-weight-bold text-primary">
 
                 {{#if authData.enabled}}
-                Change Your Password
+                Change password
                 {{else}}
-                Create Your Password
+                Create password
                 {{/if}}
 
             </h6>
@@ -78,9 +78,9 @@
             </span>
             <span class="text">
                 {{#if authData.enabled}}
-                Update Password
+                Update password
                 {{else}}
-                Create Password
+                Create password
                 {{/if}}
             </span>
         </button>

package/views/account/security.hbs

@@ -17,7 +17,7 @@
                     <div class="col-4 text-right">
                         {{#if authData.enabled}}
                         <button type="button" class="btn btn-outline-primary" data-toggle="modal"
-                            data-target="#logoutAllModal" title="Log out all sessions" id="logout-all-btn"
+                            data-target="#logoutAllModal" title="Sign out all sessions" id="logout-all-btn"
                             data-placement="top">
                             Sign out everywhere
                         </button>
@@ -33,11 +33,11 @@
                         {{#if authData.enabled}} ******** {{else}}Not configured{{/if}}
                     </div>
                     <div class="col-4 text-right">
-                        <a href="/admin/account/password" class="btn btn-outline-primary bn-xs">
+                        <a href="/admin/account/password" class="btn btn-outline-primary btn-xs">
                             {{#if authData.enabled}}
-                            Change Password
+                            Change password
                             {{else}}
-                            Create Password
+                            Create password
                             {{/if}}
                         </a>
                     </div>
@@ -58,13 +58,13 @@
                     <div class="col-4 text-right">
                         {{#if totp.enabled}}
                         <button type="button" class="btn btn-outline-danger" data-toggle="modal"
-                            data-target="#disableTfaModal" title="Disable Two-factor authentication"
+                            data-target="#disableTfaModal" title="Disable two-factor authentication"
                             id="disable-tfa-btn" data-placement="top">
                             Disable 2FA
                         </button>
                         {{else}}
                         <button type="button" class="btn btn-outline-primary" data-toggle="modal"
-                            data-target="#enableTfaModal" title="Enable Two-factor authentication" id="disable-tfa-btn"
+                            data-target="#enableTfaModal" title="Enable two-factor authentication" id="enable-tfa-btn"
                             data-placement="top">
                             Enable 2FA
                         </button>
@@ -73,6 +73,51 @@
                 </div>
             </li>
 
+            <li class="list-group-item">
+                <div class="row" style="align-items: flex-start;">
+                    <div class="col-4" style="padding-top: 0.4rem;">Passkeys
+                        <br><small class="text-muted">Sign in with just a passkey - no password or additional verification needed.</small>
+                    </div>
+                    <div class="col-4">
+                        {{#if passkeys.length}}
+                        <ul class="list-unstyled mb-0">
+                            {{#each passkeys}}
+                            <li class="mb-2">
+                                <strong>{{this.name}}</strong><br>
+                                <small class="text-muted">Added {{this.createdAtFormatted}}</small>
+                                <form method="post" action="/admin/account/passkeys/delete" style="display:inline;"
+                                    class="ml-2">
+                                    <input type="hidden" name="crumb" value="{{../crumb}}" />
+                                    <input type="hidden" name="credentialId" value="{{this.id}}" />
+                                    <button type="submit" class="btn btn-sm btn-outline-danger"
+                                        title="Remove passkey"
+                                        onclick="return confirm('Remove this passkey?');">
+                                        Remove
+                                    </button>
+                                </form>
+                            </li>
+                            {{/each}}
+                        </ul>
+                        {{else}}
+                        <span class="badge badge-light">None registered</span>
+                        {{/if}}
+                    </div>
+                    <div class="col-4 text-right">
+                        {{#if serviceUrl}}
+                        <button type="button" class="btn btn-outline-primary" id="register-passkey-btn">
+                            <i class="fas fa-fingerprint fa-sm fa-fw mr-1"></i>Add passkey
+                        </button>
+                        {{else}}
+                        <button type="button" class="btn btn-outline-secondary" disabled
+                            title="Set a Service URL in configuration before registering passkeys">
+                            Add passkey
+                        </button>
+                        <br><small class="text-muted">Requires Service URL</small>
+                        {{/if}}
+                    </div>
+                </div>
+            </li>
+
             <li class="list-group-item">
                 <div class="row" style="justify-content: center; align-items: center;">
                     <div class="col-4">Single Sign-On (SSO)</div>
@@ -87,7 +132,7 @@
                         <button type="button" class="btn btn-outline-primary" data-toggle="modal"
                             data-target="#ssoInstructionsModal" title="Setting up SSO" id="sso-instructions"
                             data-placement="top">
-                            Setup Guide
+                            Setup guide
                         </button>
                     </div>
                 </div>
@@ -101,7 +146,7 @@
     <div class="modal-dialog">
         <div class="modal-content">
             <div class="modal-header">
-                <h5 class="modal-title" id="disableTfaModalLabel">Disable Two-Factor Authentication</h5>
+                <h5 class="modal-title" id="disableTfaModalLabel">Disable two-factor authentication</h5>
                 <button type="button" class="close" data-dismiss="modal" aria-label="Close">
                     <span aria-hidden="true">&times;</span>
                 </button>
@@ -126,7 +171,7 @@
         <form method="post" action="/admin/account/tfa/enable">
             <div class="modal-content">
                 <div class="modal-header">
-                    <h5 class="modal-title" id="enableTfaModalLabel">Enable Two-Factor Authentication</h5>
+                    <h5 class="modal-title" id="enableTfaModalLabel">Enable two-factor authentication</h5>
                     <button type="button" class="close" data-dismiss="modal" aria-label="Close">
                         <span aria-hidden="true">&times;</span>
                     </button>
@@ -164,7 +209,7 @@
         <form method="post" action="/admin/account/logout-all">
             <div class="modal-content">
                 <div class="modal-header">
-                    <h5 class="modal-title" id="logoutAllModalLabel">Sign Out from All Devices</h5>
+                    <h5 class="modal-title" id="logoutAllModalLabel">Sign out from all devices</h5>
                     <button type="button" class="close" data-dismiss="modal" aria-label="Close">
                         <span aria-hidden="true">&times;</span>
                     </button>
@@ -179,7 +224,7 @@
                     <input type="hidden" name="crumb" value="{{crumb}}" />
                     <button type="button" class="btn btn-secondary" data-dismiss="modal">Cancel</button>
                     <button type="submit" class="btn btn-primary"><i
-                            class="fas fa-sign-out-alt fa-sm fa-fw mr-2 text-gray-400"></i> Sign Out Everywhere</button>
+                            class="fas fa-sign-out-alt fa-sm fa-fw mr-2 text-gray-400"></i> Sign out everywhere</button>
                 </div>
             </div>
         </form>
@@ -266,4 +311,48 @@
         </div>
 
     </div>
-</div>
+</div>
+
+<div class="modal fade" id="registerPasskeyModal" tabindex="-1" aria-labelledby="registerPasskeyModalLabel"
+    aria-hidden="true">
+    <div class="modal-dialog">
+        <div class="modal-content">
+            <div class="modal-header">
+                <h5 class="modal-title" id="registerPasskeyModalLabel">Register a new passkey</h5>
+                <button type="button" class="close" data-dismiss="modal" aria-label="Close">
+                    <span aria-hidden="true">&times;</span>
+                </button>
+            </div>
+            <div class="modal-body">
+                {{#if authData.enabled}}
+                <div class="form-group">
+                    <label for="passkey-current-password">Current password</label>
+                    <input type="password" class="form-control" id="passkey-current-password"
+                        placeholder="Enter your current password" maxlength="256" autocomplete="current-password" />
+                    <small class="form-text text-muted">Confirm your identity before registering a new passkey.</small>
+                </div>
+                {{/if}}
+                <div class="form-group">
+                    <label for="passkey-name">Passkey name</label>
+                    <input type="text" class="form-control" id="passkey-name" placeholder="e.g., MacBook Touch ID"
+                        maxlength="100" />
+                    <small class="form-text text-muted">A friendly name to help you identify this passkey.</small>
+                </div>
+                <div id="passkey-register-error" class="text-danger small" style="display:none;"></div>
+                <div id="passkey-register-success" class="text-success small" style="display:none;">
+                    Passkey registered successfully.
+                </div>
+            </div>
+            <div class="modal-footer">
+                <input type="hidden" id="security-crumb" value="{{crumb}}" />
+                <button type="button" class="btn btn-secondary" data-dismiss="modal">Cancel</button>
+                <button type="button" class="btn btn-primary" id="passkey-register-confirm-btn">
+                    Register passkey
+                </button>
+            </div>
+        </div>
+    </div>
+</div>
+
+<script src="/static/vendor/simplewebauthn/browser.min.js"></script>
+<script src="/static/js/passkey-register.js"></script>