7-part series
Passkeys in a native iOS or Android app follow the same protocol as the web but almost none of the same rules. Origin validation works through app association files rather than the URL bar, WebViews behave differently from the system browser, and each platform returns its own error codes. This series covers what changes when the ceremony leaves the browser, and the pitfalls that only appear in a shipped app.
Each article stands on its own - start wherever your problem is.
This article shows how to use the open-source Flutter passkeys package to add passkeys to Flutter apps, either with your own or a hosted passkey backend.
Explore the native passkey integration in the myVicRoads iOS & Android app. See how Corbado helped launch a seamless and secure biometric login experience.
This article explains how to implement passkeys in native iOS / Android apps. You learn when to use a native and when to use WebView (+ type) implementation.
Understand the benefits of using passkeys alongside local biometrics for optimal app security and frictionless user access.
Native passkey implementation is 100x harder than web. Discover every iOS AASA CDN trap, Android signing key mistake and WebView pitfall before you ship.
This tutorial describes how to use the corbado_auth Flutter package incl. session and user management to offer your users passkeys with fallback solutions.
Learn how origin validation works in WebAuthn for native iOS and Android apps - incl. Android SHA-256 fingerprints, AASA files and server-side trust.
See every login journey clearly, diagnose failures faster and keep your existing IDP in place.