Passkeys in icloud keychain require website to support webauthn

Does Passkeys in icloud keychain require website to support webauthn ?

Also how is this different from the javascript based webauthn implementation ?

Replies

Yes, you need a server that is able to verify the assertions/attestations that are generated. Passkeys can be used either on the web using the JavaScript WebAuthn API, or in an app using the ASAuthorization API.

  • You are welcome to use an open-source, FIDO Certified FIDO (aka WebAuthn) server from Github for this. It has documentation, tutorials, sample apps and demos to make it easier to work with Passkeys on the server side.

Add a Comment

Passkeys are WebAuthn. The change is that your Apple account is the authenticator, rather than one piece of hardware.