Web Authentication API for Chrome

The Credential Management API (Chrome 51 and later) defined a framework for retrieving credentials, including semantics for creating, getting, and storing them. It did this through two credential types: PasswordCredential and FederatedCredential. The Web Authentication API adds a third credential type, PublicKeyCredential, which allows web applications to create and use strong, cryptographically attested, and application-scoped credentials to strongly authenticate users.

Specification

Editor's draft

Status in Chromium

Blink>WebAuthentication


Enabled by default (tracking bug) in:

  • Chrome for desktop release 67
  • Chrome for Android release 70

Consensus & Standardization

After a feature ships in Chrome, the values listed here are not guaranteed to be up to date.

  • Shipped
  • In development
  • In development
  • Positive

Owners

Last updated on 2018-08-31