diff --git a/packages/libs/lib-server/src/system/settings/service/sys-settings-service.ts b/packages/libs/lib-server/src/system/settings/service/sys-settings-service.ts
index 47bd32164..21beb7475 100644
--- a/packages/libs/lib-server/src/system/settings/service/sys-settings-service.ts
+++ b/packages/libs/lib-server/src/system/settings/service/sys-settings-service.ts
@@ -9,7 +9,7 @@ import { cache, logger, mergeUtils, setGlobalProxy } from '@certd/basic';
 import * as dns from 'node:dns';
 import { BaseService, setAdminMode } from '../../../basic/index.js';
 import { executorQueue } from '../../basic/service/executor-queue.js';
-import { isComm } from '@certd/plus-core';
+import { isComm, isPlus } from '@certd/plus-core';
 const { merge } = mergeUtils;
 
 let lastSaveEnvVars = {};
@@ -155,7 +155,9 @@ export class SysSettingsService extends BaseService<SysSettingsEntity> {
 
   async reloadPublicSettings() {
     const publicSetting = await this.getPublicSettings()
-    setAdminMode(publicSetting.adminMode)
+    if (isPlus()){
+      setAdminMode(publicSetting.adminMode  ) 
+    }
   }
 
   async reloadPrivateSettings() {
diff --git a/packages/ui/certd-client/src/views/certd/mine/user-profile.vue b/packages/ui/certd-client/src/views/certd/mine/user-profile.vue
index 74c274430..3c0e2a348 100644
--- a/packages/ui/certd-client/src/views/certd/mine/user-profile.vue
+++ b/packages/ui/certd-client/src/views/certd/mine/user-profile.vue
@@ -46,8 +46,8 @@
       </div>
 
       <div class="flex flex-wrap">
-        <div class="w-full md:w-1/2 md:pr-2">
-          <div v-if="settingStore.sysPublic.oauthEnabled && settingStore.isPlus" class="bindings-card md:rounded">
+        <div v-if="settingStore.sysPublic.oauthEnabled && settingStore.isPlus" class="w-full md:w-1/2">
+          <div class="bindings-card md:rounded">
             <div class="card-title">
               <fs-icon icon="ion:link-outline" class="title-icon" />
               <span>第三方账号绑定</span>
@@ -80,8 +80,8 @@
           </div>
         </div>
 
-        <div class="w-full md:w-1/2 md:pl-2">
-          <div v-if="settingStore.sysPublic.passkeyEnabled && settingStore.isPlus" class="passkey-card md:rounded">
+        <div v-if="settingStore.sysPublic.passkeyEnabled && settingStore.isPlus" class="w-full md:w-1/2">
+          <div class="passkey-card md:rounded">
             <div class="card-title">
               <fs-icon icon="ion:finger-print" class="title-icon" />
               <span>Passkey 安全密钥</span>
@@ -490,16 +490,17 @@ onMounted(async () => {
 .profile-container {
   display: flex;
   flex-direction: column;
-  gap: 20px;
+  gap: 10px;
   // max-width: 1000px;
 
   .profile-card,
   .bindings-card,
   .passkey-card {
-    background: linear-gradient(135deg, #ffffff 0%, #f8f9fa 100%);
+    background: #fff;
     box-shadow: 0 4px 20px rgba(0, 0, 0, 0.08);
     overflow: hidden;
     transition: all 0.3s ease;
+    margin: 5px;
   }
 
   .bindings-card,
diff --git a/packages/ui/certd-client/src/views/framework/login/index.vue b/packages/ui/certd-client/src/views/framework/login/index.vue
index 4d5d78b10..fd1292067 100644
--- a/packages/ui/certd-client/src/views/framework/login/index.vue
+++ b/packages/ui/certd-client/src/views/framework/login/index.vue
@@ -46,7 +46,7 @@
               </a-form-item>
             </template>
           </a-tab-pane>
-          <a-tab-pane key="passkey" :tab="t('authentication.passkeyTab')">
+          <a-tab-pane v-if="settingStore.sysPublic.passkeyEnabled && settingStore.isPlus" key="passkey" :tab="t('authentication.passkeyTab')">
             <template v-if="formState.loginType === 'passkey'">
               <div v-if="!passkeySupported" class="text-red-500 text-sm mt-2 text-center mb-10">
                 {{ t("authentication.passkeyNotSupported") }}
diff --git a/packages/ui/certd-server/db/migration-mysql/v10040__passkey.sql b/packages/ui/certd-server/db/migration-mysql/v10040__passkey.sql
new file mode 100644
index 000000000..5c1e0a0b2
--- /dev/null
+++ b/packages/ui/certd-server/db/migration-mysql/v10040__passkey.sql
@@ -0,0 +1,20 @@
+
+CREATE TABLE `sys_passkey`
+(
+  `id`          bigint PRIMARY KEY AUTO_INCREMENT NOT NULL,
+  `user_id`     bigint      NOT NULL,
+  `device_name` varchar(100) NOT NULL,
+  `passkey_id`  varchar(100) NOT NULL,
+  `public_key`  varchar(1024) NOT NULL,
+  `counter`     bigint      NOT NULL,
+  `transports`  varchar(512) NULL,
+  `registered_at` bigint      NOT NULL,
+  `create_time` timestamp     NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  `update_time` timestamp     NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+
+CREATE INDEX `index_passkey_user_id` ON `sys_passkey` (`user_id`);
+CREATE INDEX `index_passkey_passkey_id` ON `sys_passkey` (`passkey_id`);
+
+ALTER TABLE `sys_passkey` ENGINE = InnoDB;
\ No newline at end of file
diff --git a/packages/ui/certd-server/db/migration-mysql/v10041__access_code.sql b/packages/ui/certd-server/db/migration-mysql/v10041__access_code.sql
new file mode 100644
index 000000000..0f3982b6d
--- /dev/null
+++ b/packages/ui/certd-server/db/migration-mysql/v10041__access_code.sql
@@ -0,0 +1,12 @@
+ALTER TABLE cd_access ADD COLUMN  key_id varchar(100) NULL;
+CREATE INDEX `index_access_key_id` ON `cd_access` (`key_id`);
+update cd_access set key_id = id where key_id is null;
+
+ALTER TABLE pi_notification ADD COLUMN  key_id varchar(100) NULL;
+CREATE INDEX `index_notification_key_id` ON `pi_notification` (`key_id`);
+update pi_notification set key_id = id where key_id is null;
+
+
+ALTER TABLE cd_addon ADD COLUMN  key_id varchar(100) NULL;
+CREATE INDEX `index_addon_key_id` ON `cd_addon` (`key_id`);
+update cd_addon set key_id = id where key_id is null;
diff --git a/packages/ui/certd-server/db/migration-pg/v10040__passkey.sql b/packages/ui/certd-server/db/migration-pg/v10040__passkey.sql
new file mode 100644
index 000000000..0d6df28f9
--- /dev/null
+++ b/packages/ui/certd-server/db/migration-pg/v10040__passkey.sql
@@ -0,0 +1,18 @@
+
+CREATE TABLE "sys_passkey"
+(
+  "id"          bigint PRIMARY KEY GENERATED BY DEFAULT AS IDENTITY NOT NULL,
+  "user_id"     bigint      NOT NULL,
+  "device_name" varchar(100) NOT NULL,
+  "passkey_id"  varchar(100) NOT NULL,
+  "public_key"  varchar(1024) NOT NULL,
+  "counter"     bigint      NOT NULL,
+  "transports"  varchar(512) NULL,
+  "registered_at" bigint      NOT NULL,
+  "create_time" timestamp     NOT NULL DEFAULT (CURRENT_TIMESTAMP),
+  "update_time" timestamp     NOT NULL DEFAULT (CURRENT_TIMESTAMP)
+);
+
+
+CREATE INDEX "index_passkey_user_id" ON "sys_passkey" ("user_id");
+CREATE INDEX "index_passkey_passkey_id" ON "sys_passkey" ("passkey_id");
diff --git a/packages/ui/certd-server/db/migration-pg/v10041__access_code.sql b/packages/ui/certd-server/db/migration-pg/v10041__access_code.sql
new file mode 100644
index 000000000..6e1d74c5b
--- /dev/null
+++ b/packages/ui/certd-server/db/migration-pg/v10041__access_code.sql
@@ -0,0 +1,12 @@
+ALTER TABLE cd_access ADD COLUMN  key_id varchar(100) NULL;
+CREATE INDEX "index_access_key_id" ON "cd_access" ("key_id");
+update cd_access set key_id = id where key_id is null;
+
+ALTER TABLE pi_notification ADD COLUMN  key_id varchar(100) NULL;
+CREATE INDEX "index_notification_key_id" ON "pi_notification" ("key_id");
+update pi_notification set key_id = id where key_id is null;
+
+
+ALTER TABLE cd_addon ADD COLUMN  key_id varchar(100) NULL;
+CREATE INDEX "index_addon_key_id" ON "cd_addon" ("key_id");
+update cd_addon set key_id = id where key_id is null;