Web Authentication API for Chrome

The Credential Management API (Chrome 51 and later) defined a framework for retrieving credentials, including semantics for creating, getting, and storing them. It did this through two credential types: PasswordCredential and FederatedCredential. The Web Authentication API adds a third credential type, PublicKeyCredential, which allows web applications to create and use strong, cryptographically attested, and application-scoped credentials to strongly authenticate users.

Specification

Editor's draft

Status in Chromium

Blink components: Blink>WebAuthentication

Enabled by default (tracking bug) in:

Chrome for desktop release 67
Chrome for Android release 70

Consensus & Standardization

After a feature ships in Chrome, the values listed here are not guaranteed to be up to date.

Firefox: Shipped
Edge: In development
Safari: In development
Web Developers: Positive

Owners

engedy@chromium.org
kpaulhamus@chromium.org

Last updated on 2018-08-31