Free tool
Passkey support checker
What this browser and device can do with passkeys, read from the browser's own WebAuthn API. Nothing on this page is sent anywhere.
This browser-
Checking...
SupportFrom PublicKeyCredential and getClientCapabilities
Make a test passkeyOptional. It shows which provider holds passkeys here and whether they sync.
The browser asks for Face ID, a fingerprint, the screen lock or a security key, and saves a passkey named SignOps passkey check for signops.dev. Remove it after the test.
For developers
What to do with the answers
- Platform authenticator available: offer "Create a passkey" right after sign-in. Most users can make one with the device they are on.
- Conditional UI available: add
autocomplete="username webauthn"to the username field and start a conditionalnavigator.credentials.geton page load, so saved passkeys appear in autofill. - Hybrid transport available: a user with no passkey on this computer can scan a QR code and sign in with a passkey on their phone.
- Backup eligible: the passkey syncs through the provider, so a lost phone does not lock the user out. Device-bound passkeys need a second sign-in method.
- Nothing supported: keep a code or a link by email as the way in, and offer passkeys where they work.
More: passkeys vs OTP and SignOps Passkeys, which runs the server side on your own domain.
Frequently asked questions
More questions? Email us and the answer goes on this page.
hello@signops.devIs anything sent to a server?
No. Every check runs in this page with the browser's own WebAuthn API. The test passkey, if you make one, stays on your device and in your password manager; its public key is shown here and sent nowhere.
What does a platform authenticator mean?
A passkey provider built into the device that checks the user with Face ID, a fingerprint, Windows Hello or the screen lock. When it is there, users can make a passkey without a security key or a second phone.
How can I tell if a passkey syncs?
Only by making one. The authenticator data carries a backup eligible flag (the passkey can sync) and a backed up flag (it has synced). This page reads both from the test passkey, along with the provider's AAGUID, which names iCloud Keychain, Google Password Manager, Windows Hello, 1Password and others.
What is conditional UI?
Passkeys offered in the browser's autofill when the user taps the username field, with
autocomplete="username webauthn". Users sign in without pressing a separate passkey button.How do I delete the test passkey?
Press Remove after the test. Where the browser supports
signalUnknownCredential it removes the passkey from the provider. Otherwise delete the entry named SignOps passkey check for signops.dev in your password manager.Add passkeys to your own login.
SignOps runs the server side of WebAuthn on your domain, for the web, Android and iOS. 1,000 sign-ins a month free.