Passkey Playground (WebAuthn)
Create, authenticate with, and inspect a passkey — entirely in your browser.
Runs in your browser — nothing is uploaded
How to use
- Configure the relying party and user.
- Click Create passkey and approve with your device.
- Click Authenticate.
- Read the decoded fields and the signature-verification result.
FAQ
Does this send my passkey anywhere?
No. The WebAuthn ceremony, decoding and signature verification all run in your browser. Nothing is uploaded.
Do I need a server?
No. There is no relying-party server. The tool acts as its own relying party in the page and verifies the assertion against the public key it captured at creation.
Which algorithms are supported?
ES256 and RS256. EdDSA (Ed25519) is not supported because the Web Crypto API cannot verify it in most browsers.
Is the passkey saved?
Only in your authenticator (device or security key). The page keeps nothing after a reload.