<!--
{
  "documentType" : "article",
  "framework" : "AuthenticationServices",
  "identifier" : "/documentation/AuthenticationServices/password-use-in-web-browsers",
  "metadataVersion" : "0.1.0",
  "role" : "collectionGroup",
  "title" : "Password use in web browsers"
}
-->

# Password use in web browsers

Register and authenticate website users by using passwords.

## Discussion

If your browser app uses <doc://com.apple.documentation/documentation/WebKit/WKWebView> to display web content, <doc://com.apple.documentation/documentation/WebKit> automatically handles `WebAuthentication` challenges in webpages and requests credentials from the person using the browser. If your browser app uses an alternative web browser engine — for example, an alternate browser engine for iPhone that you write using <doc://com.apple.documentation/documentation/BrowserEngineKit> — when the website makes a `WebAuthentication` challenge, use [`ASAuthorizationController`](/documentation/AuthenticationServices/ASAuthorizationController) to discover and use credentials to respond to the challenge.  [`ASAuthorizationController`](/documentation/AuthenticationServices/ASAuthorizationController) works with passwords the system stores on the keychain or that third-party credential managers control.

## Topics

### Website authorization

[`class ASAuthorizationWebBrowserPublicKeyCredentialManager`](/documentation/AuthenticationServices/ASAuthorizationWebBrowserPublicKeyCredentialManager)

A class that you use to request access to a person’s passkeys in a web browser, and that reports on the access status.

### Website authentication requests

[`protocol ASAuthorizationWebBrowserSecurityKeyPublicKeyCredentialAssertionRequest`](/documentation/AuthenticationServices/ASAuthorizationWebBrowserSecurityKeyPublicKeyCredentialAssertionRequest)

An interface you use to respond to authentication challenges in a web browser.

[`protocol ASAuthorizationWebBrowserSecurityKeyPublicKeyCredentialRegistrationRequest`](/documentation/AuthenticationServices/ASAuthorizationWebBrowserSecurityKeyPublicKeyCredentialRegistrationRequest)

An interface you use to respond to password-creation challenges in a web browser.

### Website credential providers

[`protocol ASAuthorizationWebBrowserSecurityKeyPublicKeyCredentialProvider`](/documentation/AuthenticationServices/ASAuthorizationWebBrowserSecurityKeyPublicKeyCredentialProvider-8xc1s)

A protocol for creating passkey requests.

[`@protocol ASAuthorizationWebBrowserSecurityKeyPublicKeyCredentialProvider`](/documentation/AuthenticationServices/ASAuthorizationWebBrowserSecurityKeyPublicKeyCredentialProvider-4gzot)

A protocol for creating security key requests.


---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)