WebAuthn

WebAuthn is the W3C standard for secure, hardware-based passwordless authentication using public-key cryptography.

WebAuthn replaces vulnerable passwords with cryptographic key pairs stored on authenticators like YubiKeys, Touch ID, or Windows Hello. It operates as a core component of the FIDO2 framework, enabling browsers (Chrome 67+, Safari 13+) to communicate directly with local hardware via the Credentials Container API. By leveraging asymmetric encryption, it eliminates phishing risks: the private key never leaves the device, and the public key stored on the server is useless to attackers if leaked. This protocol delivers a sub-second login experience that satisfies high-assurance security requirements (AAL3) without the friction of traditional multi-factor methods.

https://webauthn.guide