{"id":74832,"date":"2026-08-11T01:05:49","date_gmt":"2026-08-11T07:05:49","guid":{"rendered":"https:\/\/www.scalahosting.com\/blog\/?p=74832"},"modified":"2026-08-11T01:12:43","modified_gmt":"2026-08-11T07:12:43","slug":"spanel-passkey-login-web-hosting-control-panels","status":"publish","type":"post","link":"https:\/\/www.scalahosting.com\/blog\/spanel-passkey-login-web-hosting-control-panels\/","title":{"rendered":"SPanel Brings Passkey Login to Web Hosting Control Panels"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">SPanel now offers three added ways to sign in to the control panel: a <strong>Google account<\/strong>, a <strong>GitHub account<\/strong>, or a <strong>passkey<\/strong>.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A passkey uses your device&#8217;s biometrics or a security key &#8211; no password to type or reuse. Your password login and TOTP (Time-Based One-Time Password)&nbsp; two-factor both stay available.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>New buttons<\/strong>: Continue with Google, Continue with GitHub, and Login with Passkey.<\/li>\n\n\n\n<li><strong>Passkeys are phishing-resistant<\/strong>: no shared secret sits on the server.<\/li>\n\n\n\n<li><strong>Nothing is removed<\/strong>; password login still works.<\/li>\n\n\n\n<li>These <strong>options are free<\/strong> on every managed ScalaHosting cloud VPS plan.<\/li>\n<\/ul>\n\n\n<div class=\"shortcode-cta-new-wrap row cloudvps\">\r\n    <img decoding=\"async\" class=\"shortcode-logo\" src=\"\/blog\/images\/shortcode-bg-new-logo-cloudvps.svg\" alt=\"shortcode-logo\" title=\"shortcode-logo\"\/>\r\n    <div class=\"shortcode-cta-img col-10 col-sm-7 col-md-5\">\r\n        <img decoding=\"async\" class=\"shortcode-bg\" src=\"\/blog\/images\/shortcode-bg-new-cloudvps.webp\" alt=\"shortcode-bg\" title=\"shortcode-bg\"\/>\r\n    <\/div>\r\n    <div class=\"shortcode-cta-content col-12 col-md-7\">\r\n        <div class=\"content\">\r\n            <div class=\"heading\">Supercharge Your Business with an All-inclusive Fully Managed Cloud<\/div>\r\n            <div class=\"list-wrap\">\r\n                <div class=\"list\">\r\n                    <div><b>Free, Effortless & No-Downtime Migration<\/b><\/div>\r\n                    <div><b>Anytime Unconditional Money-back Guarantee<\/b><\/div>\r\n                    <div><b>Full Scalability & 24\/7 Expert Cloud Support<\/b><\/div>\r\n                <\/div>\r\n            <\/div>\r\n            <div class=\"btn-wrap row\">\r\n                <div class=\"col-auto\">\r\n                    <a class=\"button green\" href=\"https:\/\/www.scalahosting.com\/managed-cloud-hosting.html\">Start Now<\/a>\r\n                <\/div>\r\n                <div class=\"col-auto\">\r\n                    <button class=\"button brown_outer\" title=\"Contact Sales\" onclick=\"chatChangeVisibility(this, 'maximize', {}, 5);\">Chat with our Experts<\/button>\r\n                <\/div>\r\n            <\/div>\r\n        <\/div>\r\n    <\/div>\r\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Why SPanel Passkey Login matters<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Control panel logins are a favorite target for hackers. One reused password or one fake login email can expose your sites and databases. A passkey ties that check to hardware you actually hold, which makes your credentials much harder to steal remotely.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The SPanel login page keeps the usual email and password fields. A divider reading &#8220;or&#8221; then offers the extra options &#8211;&nbsp; Google, GitHub, or Login with Passkey.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">People often treat a passkey as a fancier stored password.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It is not.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A passkey is like a <strong>key pair<\/strong>: your device has the private half, and SPanel only keeps the public half.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>How SPanel Passkey Login actually works<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Passkeys use <strong>WebAuthn<\/strong>, the standard behind Touch ID, Face ID, Windows Hello, and hardware keys. Your device signs a one-time challenge, and SPanel verifies it against the stored public key. Google and GitHub confirm you through the provider.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Where SPanel is different<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.scalahosting.com\/spanel.html\"><strong>SPanel<\/strong><\/a><strong> <\/strong>is free on every managed ScalaHosting cloud VPS plan, and these sign-in options <strong>cost nothing extra<\/strong>. ScalaHosting has hosted sites for over 15 years, now more than 700,000 across 120+ countries.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Login methods compared<\/strong><\/h2>\n\n\n\n<figure class=\"wp-block-table is-style-regular green-rows\"><table class=\"has-fixed-layout\"><thead><tr><th><strong>Method<\/strong><\/th><th><strong>What you present<\/strong><\/th><th><strong>Password typed?<\/strong><\/th><th><strong>Phishing-resistant<\/strong><\/th><\/tr><\/thead><tbody><tr><td>Email + password<\/td><td>Something you know<\/td><td>Yes<\/td><td>No<\/td><\/tr><tr><td>Google or GitHub<\/td><td>A provider account<\/td><td>No<\/td><td>Provider-dependent<\/td><\/tr><tr><td>Passkey<\/td><td>Device biometric or key<\/td><td>No<\/td><td>Yes<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large mpg-gallery\"><img decoding=\"async\" width=\"1140\" height=\"812\" src=\"https:\/\/www.scalahosting.com\/blog\/wp-content\/uploads\/2026\/08\/image1-1-1140x812.webp\" alt=\"SPanel Brings Passkey Login to Web Hosting Control Panels, Login methods compared\" class=\"wp-image-74836\" srcset=\"https:\/\/www.scalahosting.com\/blog\/wp-content\/uploads\/2026\/08\/image1-1-1140x812.webp 1140w, https:\/\/www.scalahosting.com\/blog\/wp-content\/uploads\/2026\/08\/image1-1-300x214.webp 300w, https:\/\/www.scalahosting.com\/blog\/wp-content\/uploads\/2026\/08\/image1-1-768x547.webp 768w, https:\/\/www.scalahosting.com\/blog\/wp-content\/uploads\/2026\/08\/image1-1-1536x1094.webp 1536w, https:\/\/www.scalahosting.com\/blog\/wp-content\/uploads\/2026\/08\/image1-1.webp 1600w\" sizes=\"(max-width: 361px) 660px, (max-width: 767px) 89vw, (max-width: 1000px) 54vw, (max-width: 1071px) 910px, 1140px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">One thing to note &#8211; passkeys are not a fix-all solution.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A passkey still lives on a device, so losing every enrolled device without a backup can lock you out &#8211; so always keep password and TOTP as a fallback.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Recommended workflow<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Keep your password and TOTP active.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Add a passkey on a daily device, and enroll a backup device or key so a lost phone never locks you out. Teams on Google or GitHub can also use those buttons.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Steps to use Passkey Login in SPanel<\/strong><\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Open the <strong>SPanel login page<\/strong> at \/spanel\/login.<\/li>\n\n\n\n<li>Find the <strong>Email or Username<\/strong> field (most likely named &#8220;Enter your email or username&#8221;), and the Password field.<\/li>\n\n\n\n<li>Note the <strong>Remember Me<\/strong> checkbox and the <strong>Login<\/strong> button.<\/li>\n\n\n\n<li>Under the divider reading &#8220;or&#8221;, find the three buttons: <strong>Continue with Google<\/strong>, <strong>Continue with GitHub<\/strong>, <strong>Login with Passkey<\/strong>.<\/li>\n\n\n\n<li>Choose Login with Passkey to use your device, or a provider button for Google or GitHub.<\/li>\n\n\n\n<li>For a classic login, the <strong>Reset Password<\/strong> link sits below the card.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Related resources<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">SPanel users play an active role in suggesting and voting for new features on our hosting management platform. Check out our <a href=\"https:\/\/features.spanel.io\/\"><strong>SPanel Features Forum<\/strong><\/a> to see what we have cooking or propose a functionality that you will find most useful.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>FAQ<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Q:<\/strong> <strong>What is a passkey?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>A:<\/strong> A passkey is a login credential stored on your device instead of a password. It uses WebAuthn, the standard behind Touch ID, Face ID, Windows Hello, and hardware keys. Your device holds a private key and proves it, so nothing reusable is stored on the server.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Q:<\/strong> <strong>Do I have to stop using my password?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>A:<\/strong> No. The email or username and password login works exactly as before, and TOTP two-factor stays available next to it. Passkeys, Google sign-in, and GitHub sign-in are added choices on the login page, not replacements for how you sign in today.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Q:<\/strong> <strong>Why are passkeys phishing-resistant?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>A:<\/strong> Because there is no shared secret to steal. A passkey signs a one-time challenge with a private key that never leaves your device, so a fake login page has nothing to capture and replay. A stolen password works anywhere; a signature does not.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Q:<\/strong> <strong>How do I sign in with Google or GitHub?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>A:<\/strong> On the login page, below the divider reading &#8220;or&#8221;, pick Continue with Google or Continue with GitHub. You approve access at the provider, and it confirms your identity back to SPanel. This suits teams that already protect those accounts with two-factor authentication.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Q:<\/strong> <strong>What happens if I lose my device?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>A:<\/strong> Keep a second sign-in method so a lost device cannot lock you out. Your password and TOTP two-factor still work, and a passkey on a second device or hardware key is a backup. Treat it as an added door, not your only key.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Q:<\/strong> <strong>Is passkey login free?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>A:<\/strong> Yes. SPanel is free on every managed ScalaHosting cloud VPS plan, and these login options are included at no extra cost. There is no per-feature licensing and no add-on to buy. You get the panel and its sign-in choices with the plan.<\/p>\n\n\n\n<script type=\"application\/ld+json\">\n    {\n      \"@context\": \"https:\/\/schema.org\",\n      \"@type\": \"FAQPage\",\n      \"mainEntity\": [{\n        \"@type\": \"Question\",\n        \"name\": \"What is a passkey?\",\n        \"acceptedAnswer\": {\n          \"@type\": \"Answer\",\n          \"text\": \"A passkey is a login credential stored on your device instead of a password. It uses WebAuthn, the standard behind Touch ID, Face ID, Windows Hello, and hardware keys. Your device holds a private key and proves it, so nothing reusable is stored on the server.\"\n        }\n      }, {\n        \"@type\": \"Question\",\n        \"name\": \"Do I have to stop using my password?\",\n        \"acceptedAnswer\": {\n          \"@type\": \"Answer\",\n          \"text\": \"No. The email or username and password login works exactly as before, and TOTP two-factor stays available next to it. Passkeys, Google sign-in, and GitHub sign-in are added choices on the login page, not replacements for how you sign in today.\"\n        }\n      },{\n        \"@type\": \"Question\",\n        \"name\": \"Why are passkeys phishing-resistant?\",\n        \"acceptedAnswer\": {\n          \"@type\": \"Answer\",\n          \"text\": \"Because there is no shared secret to steal. A passkey signs a one-time challenge with a private key that never leaves your device, so a fake login page has nothing to capture and replay. A stolen password works anywhere; a signature does not.\"\n        }\n      },{\n        \"@type\": \"Question\",\n        \"name\": \"How do I sign in with Google or GitHub?\",\n        \"acceptedAnswer\": {\n          \"@type\": \"Answer\",\n          \"text\": \"On the login page, below the divider reading \"or\", pick Continue with Google or Continue with GitHub. You approve access at the provider, and it confirms your identity back to SPanel. This suits teams that already protect those accounts with two-factor authentication.\"\n        }\n      },{\n        \"@type\": \"Question\",\n        \"name\": \"What happens if I lose my device?\",\n        \"acceptedAnswer\": {\n          \"@type\": \"Answer\",\n          \"text\": \"Keep a second sign-in method so a lost device cannot lock you out. Your password and TOTP two-factor still work, and a passkey on a second device or hardware key is a backup. Treat it as an added door, not your only key.\"\n        }\n      },{\n        \"@type\": \"Question\",\n        \"name\": \"Is passkey login free?\",\n        \"acceptedAnswer\": {\n          \"@type\": \"Answer\",\n          \"text\": \"Yes. SPanel is free on every managed ScalaHosting cloud VPS plan, and these login options are included at no extra cost. There is no per-feature licensing and no add-on to buy. You get the panel and its sign-in choices with the plan.\"\n        }\n      }]\n    }\n<\/script>\n","protected":false},"excerpt":{"rendered":"<p>SPanel now offers three added ways to sign in to the control panel: a Google account, a GitHub account, or &#8230;<\/p>\n","protected":false},"author":106,"featured_media":74833,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_seopress_titles_title":"SPanel Brings Passkey Login to Web Hosting Panels %%sep%% %%sitetitle%%","_seopress_titles_desc":"SPanel introduces passkey login for web hosting control panels, enabling faster, passwordless authentication with enhanced security and user convenience.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"footnotes":""},"categories":[125],"tags":[],"class_list":["post-74832","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-spanel"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.scalahosting.com\/blog\/wp-json\/wp\/v2\/posts\/74832","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.scalahosting.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.scalahosting.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.scalahosting.com\/blog\/wp-json\/wp\/v2\/users\/106"}],"replies":[{"embeddable":true,"href":"https:\/\/www.scalahosting.com\/blog\/wp-json\/wp\/v2\/comments?post=74832"}],"version-history":[{"count":3,"href":"https:\/\/www.scalahosting.com\/blog\/wp-json\/wp\/v2\/posts\/74832\/revisions"}],"predecessor-version":[{"id":74839,"href":"https:\/\/www.scalahosting.com\/blog\/wp-json\/wp\/v2\/posts\/74832\/revisions\/74839"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.scalahosting.com\/blog\/wp-json\/wp\/v2\/media\/74833"}],"wp:attachment":[{"href":"https:\/\/www.scalahosting.com\/blog\/wp-json\/wp\/v2\/media?parent=74832"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.scalahosting.com\/blog\/wp-json\/wp\/v2\/categories?post=74832"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.scalahosting.com\/blog\/wp-json\/wp\/v2\/tags?post=74832"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}