awesome-webauthn

A woundeful tech article about attestations.

A fantastic introduction to WebAuthn by folks at Auth0.

A official guide to make your security keys Microsoft Entra compatible.

This article shows how Fido2 WebAuthn could be used as 2FA and integrated into an ASP.NET Core Identity application.

Probably the best CredManAPI guide.

認証,認可,FIDO,CTAP,NFC,BLE,c,c++,c#,Rust,ねこのげぼく.

FIDO2 authenticator emulator/software token in Java.

Bulwark passkeys is a desktop application written in Golang supporting CTAP2, similar to a platform-based authenticator.

virtual-fido is an Golang based commandline application which emulates an USB security token. This can also be used as a library.

A FIDO2 WebAuthn BLE Android phone token.

U2F security token emulator written in Rust.

A demo passkey provider on iOS

A working implementation library + demo for fido2 and WebAuthn using .NET.

A Laravel adapter for the WebAuthn Framework (from Spomky-Labs).

Ruby implementation of a WebAuthn Relying Party.

Pythonic WebAuthn. A Python3 implementation of the WebAuthn API focused on making it easy to leverage the power of WebAuthn.

A framework-independent Relying Party implemnetation for Go.

Reactive WebAuthn library for Eclipse Vert.x. Works with any Vert.x related framework: Vert.x Web, Quarkus, ES4X, etc.

Public FIDO-based "wallet" demo and associated standards proposal.

Probably the best WebAuthn flow demo.

An example of a banking use case with WebAuthn with automatic passkey upgrades feature.

A WebAuthN demo using dotnetcore and the FIDO2.NET library that integrates passwordless auth with

An example Android application that demonstrates native passkey support.

A demonstration of the WebAuthn Specification

FIDO2 CTAP2 Javacard Applet.

U2F Zero is an open source U2F token for 2 factor authentication.

A privacy-focused Java Card U2F Authenticator based on ledger-u2f-javacard (More recent fork of

OpenSK is an open-source implementation for security keys written in Rust that supports both FIDO U2F and FIDO2 standards.

Nitrokey is developing/producing different types of open source and open hardware FIDO2 security keys (check for the "Nitrokey FIDO2" and "Nitrokey 3" related repositories).

Solo is an open source FIDO2 security key, and you can get one at

A CBOR specification page with most recent updates and libraries for using CBOR in various programming languages.

Credential Exchange Protocol (CXP) & Credential Exchange Format (CXF), working drafts

A right place to find most recent & original FIDO specifications.

Flutter package to provide passkey authentication for iOS and Android apps.

Android library to interact with FIDO2 and U2F security keys over NFC and USB. Also provides a WebAuthn-WebView bridge.

Go client library (wraps Yubico: libfido2).

This library provides you a way to handle W3C Web Authentication API (a.k.a. WebAuthN / FIDO 2.0) easily.

WebAuthn, Simplified. A TypeScript-first browser library for simpler WebAuthn integration. Supports use in TypeScript and JavaScript projects. Partner library to the back end

Rust library to interact with Security Keys, used by Firefox.

A guide for those who have CTAP2.0 authenticator, and they want to migrate to CTAP2.1

Anti-phishing passkeys demos for instant messaging apps

A 2-sided PDF explaining all relevant objects, concepts and ressources to implement passkeys.

SSH client that runs in the browser and implements WebAuthn based SSH authentication. WebAuthn authentication is implemented by implementing OpenSSH's

Info page that shows current data about passkey-readiness of operating systems and browsers

Awesome webauthn logos by Adam Powers.