12-part series
WebAuthn has a small number of concepts that decide whether a passkey implementation works: what the relying party ID binds a credential to, what user verification actually asserts, why discoverable credentials are what make usernameless login possible, and how conditional UI puts passkeys in the autofill dropdown. This series explains each one in the terms an implementer needs, not the terms the spec uses.
Each article stands on its own - start wherever your problem is.
This post helps you find the right WebAuthn server library to offer passkeys. 9 libraries are compared and a strategy to find the right library is given.
Learn about isUserVerifyingPlatformAuthenticatorAvailable() return values & what they mean across iOS 17, Android 14, and Windows 11 for passkey onboarding.
Explore how the WebAuthn autocomplete token (Conditional UI) improve login UX by offering passkey & password autofill & see the behavior across browsers.
Conditional UI / Conditional Mediation / Passkey Autofill is a new feature of passkeys. This article explains what it is, how it works & how to implement it
Explore how passkeys leverage QR codes and Bluetooth for cross-platform authentication to have seamless, secure logins across devices without passwords.
This blog post explains WebAuthn Relying Party ID for passkey authentication. It outlines the right configuration, domains matching & native app configurations.
Misconfigurations in WebAuthn server settings can lead to UX problems and disrupt existing passkeys. This guide helps developers to set up WebAuthn servers.
Explore the WebAuthn server options overview of early adopters to see configurations for passkey / WebAuthn creation and authentication ceremonies.
Explore how WebAuthn transports work in browser APIs, iOS AuthenticationServices and Android Credential Manager for cross-device passkey authentication.
Understand WebAuthn User ID, User Name, User Display Name, User Handle and Credential ID in Passkey applications and get advice for implementation.
This article provides a detailed explanation and real-life tests of how WebAuthn User Verification (UV) and User Presence (UP) work with passkeys and MFA.
Learn how WebAuthn, CTAP and FIDO2 differ, how they work together for passkey authentication and when direct CTAP integration is needed.
See every login journey clearly, diagnose failures faster and keep your existing IDP in place.