WebAuthn is a browser API that enables public-key cryptographic authentication, powering phishing-resistant passwordless sign-ins and passkeys.
WebAuthn (Web Authentication API) is a W3C global standard specification that allows web applications to authenticate users using asymmetric public-key cryptography instead of passwords. Working in tandem with FIDO2 hardware authenticators (Touch ID, Face ID, Windows Hello, YubiKeys), WebAuthn provides phishing-resistant login credentials known as Passkeys.
Generate high-entropy fallback credentials with the Password Generator or inspect cryptographic credentials with our Base64 Converter.
| Specification | Details |
|---|---|
| Standard Bodies | W3C Recommendation & FIDO Alliance |
| Key APIs | navigator.credentials.create() (Registration) & navigator.credentials.get() (Authentication) |
| Cryptographic Algorithms | ES256 (ECDSA with P-256), RS256, Ed25519 (EdDSA) |
| Phishing Protection | Browser binds authentication challenge to the exact cryptographic Origin |
Free, browser-based utilities to test, generate, and inspect Web Authentication API (WebAuthn / FIDO2) payloads directly.
Generate secure passwords, passphrases, and PINs with real-time strength analysis.
Generate and verify cryptographic hashes with multiple algorithms.
Decode, inspect, and validate JWT tokens with claim and signature analysis.
Encode and decode Base64 strings, files, and data URIs instantly.
