WebAuthn
also: FIDO2, Web Authentication API
WebAuthn is a web standard for passwordless authentication that uses public-key cryptography, allowing users to log in with biometrics or security keys instead of passwords.
WebAuthn (Web Authentication) is a W3C standard that enables secure, passwordless login on websites and web applications. It leverages public-key cryptography where a user's device generates a private key (stored locally and never shared) and a public key (sent to the server), eliminating the need to transmit passwords over the internet.
Users can authenticate using built-in platform authenticators like fingerprint readers, facial recognition, or PIN codes on their device, or external hardware security keys. The server stores only the public key and challenges the device to prove possession of the private key during login.
Example: Instead of entering a password on Gmail, you might tap your fingerprint reader or insert a USB security key to verify your identity. This method is more resistant to phishing attacks and credential theft than traditional passwords.
WebAuthn is increasingly used on Linux desktops through browsers like Firefox and Chrome, with support from system components like systemd and PAM for local authentication as well.