Web Authentication API
E856225
The Web Authentication API is a web standard that enables secure, passwordless authentication on the web using public-key cryptography and authenticators such as security keys or built-in platform authenticators.
Observed surface forms (2)
| Surface form | Occurrences |
|---|---|
| Web Authentication | 1 |
| WebAuthn | 1 |
Statements (54)
| Predicate | Object |
|---|---|
| instanceOf |
W3C Recommendation
ⓘ
authentication protocol ⓘ web standard ⓘ |
| alsoKnownAs |
Web Authentication
NERFINISHED
ⓘ
WebAuthn NERFINISHED ⓘ |
| basedOn |
CTAP
NERFINISHED
ⓘ
Client to Authenticator Protocol NERFINISHED ⓘ |
| compatibleWith | HTTPS ⓘ |
| defines |
navigator.credentials.create
ⓘ
navigator.credentials.get ⓘ |
| designedFor |
web applications
ⓘ
web browsers ⓘ |
| enables | strong user authentication on the web ⓘ |
| extends | Credential Management API NERFINISHED ⓘ |
| goal |
improve authentication security
ⓘ
improve user experience ⓘ reduce phishing attacks ⓘ replace passwords with public-key credentials ⓘ |
| hasVersion |
Level 1
ⓘ
Level 2 ⓘ Level 3 ⓘ |
| improvesOver | password-based authentication ⓘ |
| partOf | FIDO2 Project NERFINISHED ⓘ |
| prevents | credential replay across origins ⓘ |
| relatedTo |
FIDO Alliance
NERFINISHED
ⓘ
FIDO U2F NERFINISHED ⓘ FIDO2 NERFINISHED ⓘ |
| requires | secure context ⓘ |
| standardizedBy |
W3C
NERFINISHED
ⓘ
World Wide Web Consortium NERFINISHED ⓘ |
| supports |
PIN-based verification via authenticators
ⓘ
biometric verification via authenticators ⓘ built-in device authenticators ⓘ multi-factor authentication ⓘ origin-bound credentials ⓘ passwordless authentication ⓘ phishing-resistant authentication ⓘ platform authenticators ⓘ roaming authenticators ⓘ security keys ⓘ two-factor authentication ⓘ user presence checks ⓘ user verification checks ⓘ |
| usedBy |
major web browsers
ⓘ
web application developers ⓘ |
| uses | public-key cryptography ⓘ |
| usesConcept |
assertion
ⓘ
attestation ⓘ authenticator ⓘ authenticatorData ⓘ clientDataJSON ⓘ credential ID ⓘ public key credential ⓘ relying party ⓘ |
Referenced by (4)
Full triples — surface form annotated when it differs from this entity's canonical label.
this entity surface form:
Web Authentication
this entity surface form:
WebAuthn