Chrome for Developers’ Post

View organization page for Chrome for Developers, graphic

7,142 followers

Building secure authentication just got easier with passkeys. Say goodbye to password headaches and embrace a more secure future. This comprehensive guide delves into server-side passkey implementation, guiding you through the process of registering and authenticating users using WebAuthn. Learn more: https://goo.gle/3Y9QQ75 #PasskeysWeek

  • Introduction to server-side passkey implementation 

To create and authenticate with passkeys, you will use the WebAuthn API for the web, or the Credential Manager API for Android apps. These APIs handle the communication between the client and the passkey provider.

While these APIs are called from a client such as a web page or Android app, you need to implement the rest of the functionality on the server to complete your authentication use cases.

A passkey implementation consists of two functionalities:

Passkey registration. Use the WebAuthn API or the Credential Manager API to let the user create a passkey. Store the associated public key on the server.
Authentication with a passkey. Get an authentication challenge from the server and use the WebAuthn API or Credential Manager API to let the user sign this challenge with their passkey. Verify the signature on the server. If the signature is valid, authenticate the user.
Merill Fernando

Product Manager @ Microsoft 👉 Sign up to Entra.News my weekly newsletter | Creator of cmd.ms • maester.dev • idPowerToys.merill.net • graphxray.merill.net

3d

Very exciting, however the link doesn't work and takes you to the Google home page.

Ki-Eun Shin

Principal Software Development Engineer at SK Telecom

3d

The link is broken.

See more comments

To view or add a comment, sign in

Explore topics