Web Authentication API enabling passwordless login with public key cryptography using FIDO2 security keys and platform authenticators.
W3C WebAuthn is the browser API that enables passwordless, phishing-resistant sign-in using public-key credentials held on FIDO2 security keys or built-in platform authenticators. A website receives only a public key and a signed challenge, so there is no shared secret for attackers to steal in a breach. Paired with the CTAP protocol, it is the web-facing half of the FIDO2 standard now supported across all major browsers and operating systems.
WebAuthn
|
Published 2018
Standard Details
| Category | FIDO Alliance |
| Year Published | 2018 |
| Status | Active |