What is Chrome on Mac? Definition, AAGUID and Role in WebAuthn

What is Chrome on Mac?#

Chrome on Mac is a WebAuthn authenticator that is offered to use on macOS devices running Google's popular web browser Chrome.

AAGUID of Chrome on Mac#

The AAGUID associated with Chrome on Mac is adce0002-35bc-c60a-648b-0b25f1f05503.

This identifier is used to identify the Google Password Manager as an authenticator in passkey / WebAuthn-based systems. Read more about this in the article about AAGUID

---

Features and Security of Chrome on Mac#

Chrome on Mac offers several features that enhance security and user experience by leveraging macOS's native capabilities:

Integration with macOS Keychain#

• Store Passkeys: Safely stores passkeys in your Chrome profile.
• Manage Passkeys: Easy management of passkeys through Chrome settings, providing a secure way to handle authentication data.

Seamless User Experience#

• Autofill: Utilizes saved passkeys to autofill login details on websites, streamlining the sign-in process (Conditional UI).
• Protection by Touch ID: Although passkeys stored in Chrome can't be saved or used in iCloud Keychain, they are protected by they are stored in the secure enclave of macOS and offer the user local Touch ID to access private keys.

Managing Passkeys in Chrome on Mac#

To manage passkeys in Chrome on your Mac:

1. Open Chrome.
2. Select More > Passwords and autofill > Google Password Manager.
3. On the left, select Settings > Manage passkeys.

Important Considerations#

• Chrome on Mac can use passkeys stored locally in the secure enclave but cannot use passkeys from iCloud Keychain.
• If the Chrome profile is deleted or the macOS devices is lost, passkeys stored by Chrome on Mac cannot be recovered.

Pros and Cons of Using Chrome on Mac#

Pros#

• Deep Integration: Uses macOS’s secure enclave for enhanced security.
• User-Friendly: Offers Touch ID, autofill and easy passkey management.

Cons#

• Recovery Limitation: Passkeys cannot be recovered if the Chrome profile is deleted or the device is lost.

---

Chrome on Mac FAQs#

What is Chrome on Mac?#

• Chrome on Mac is a WebAuthn authenticator that can be selected when using of Google Chrome on macOS devices.,

How does Chrome on Mac handle passkeys?#

• Chrome on Mac stores and manages passkeys in the macOS’s secure enclave, enhancing security but does not support saving or using passkeys in iCloud Keychain.

Can I recover my passkeys if my Mac is lost or Chrome is deleted?#

• No, if your Chrome profile is deleted or your Mac is lost, passkeys stored in Chrome cannot be recovered as they are not saved in a synced way (e.g. via iCloud Keychain).

Does Chrome on Mac support autofill for passkeys?#

• Yes, Chrome on Mac supports autofill for passkeys (Conditional UI) that are stored locally in the secure enclave, facilitating a smoother and faster sign-in process on websites.