Preview draft. Copy and visuals are pending review and may change before launch.
← Back to the glossary

Glossary

WebAuthn

Published 2026-09-05

WebAuthn is the standard that lets a website ask a user's device to prove possession of a private key — often backed by dedicated hardware on the device — without the website ever seeing the key itself or any password. It defines how the browser, the device, and the site communicate to make passwordless login interoperable across platforms rather than proprietary to any one vendor.

Because the standard is built around public-key cryptography rather than a shared secret, it's also structurally resistant to a common phishing pattern: a credential registered for one site's exact origin generally can't be replayed against a convincing lookalike, the way a typed password can.