How can an iOS browser app request the Web Browser Public Key Credential entitlement for Passkeys?

Hello Apple Developer Team,

I am developing a general-purpose web browser for iOS using WKWebView.

Current status:

• The app is distributed through TestFlight (Internal Testing). • The app is registered in App Store Connect. • The browser supports standard web browsing with multiple tabs and arbitrary websites.

My goal is to support WebAuthn passkey authentication for websites such as Google, GitHub, Microsoft, and other websites that support passkeys.

While reviewing Apple's documentation, I found:

  • "Passkey use in web browsers"
  • "Authenticating people by using passkeys in browser apps"

These documents mention that browser apps on iOS can support passkeys using:

ASAuthorizationWebBrowserPublicKeyCredentialManager

and the entitlement:

com.apple.developer.web-browser.public-key-credential

However, I could only find a request form titled:

"Request the macOS Web Browser Public Key Credential Entitlement"

which specifically asks:

"Is your app a web browser on macOS?"

My application is an iOS web browser, not a macOS browser.

In addition, I previously requested the Default Web Browser entitlement, but my request was declined.

My questions are:

  1. Is there a separate application process for requesting the Web Browser Public Key Credential entitlement for an iOS browser?

  2. Is approval of the Default Web Browser entitlement required before an iOS browser can use WebAuthn passkeys?

  3. Can an iOS browser request only the Web Browser Public Key Credential entitlement without becoming the system default browser?

  4. Is there any official documentation describing the entitlement request process for iOS browser apps?

I know that third-party browsers such as Aloha Browser appear to support system Passkeys on iOS, so I would like to understand the correct implementation and entitlement process for an iOS browser.

Thank you very much for your guidance.

Answered by Systems Engineer in 897366022

For an iOS web browser to use passkeys, all you need is the com.apple.developer.web-browser entitlement. The WKWebView itself then provides the full support for everything you need.

Accepted Answer

For an iOS web browser to use passkeys, all you need is the com.apple.developer.web-browser entitlement. The WKWebView itself then provides the full support for everything you need.

How can an iOS browser app request the Web Browser Public Key Credential entitlement for Passkeys?
 
 
Q