thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Advanced

Web Authentication (WebAuthn)

W3C API that lets websites register and authenticate users with public key credentials.

Definition

WebAuthn defines how browsers and relying parties create and use credentials on authenticators. During registration the authenticator generates a key pair scoped to the relying party ID; during login it signs a server challenge. Browsers enforce origin checks, which defeats phishing proxies.

Example

navigator.credentials.create() in JavaScript starts a WebAuthn registration ceremony.

Exam tip

Relying party ID scoping is what makes WebAuthn phishing-resistant.

Related terms