Website Security
Processed on your deviceWebAuthn & Passkey Ceremony Auditor
Audit challenge entropy, RP ID, COSE algorithms, user verification, attestation privacy, timeout and credential exclusion options.
WebAuthn publicKey options JSON
This reviews option structure only. Registration and authentication must still verify origin, RP ID hash, challenge, signature, counters and credential ownership on the server.
Deterministic evidence-bound result
Audit passkey ceremony