WebAuthn
Technology & Computing abbreviation · Cybersecurity
| Stands for | Web Authentication |
|---|---|
| Categories | Technology & Computing |
WebAuthn stands for Web Authentication, a cybersecurity abbreviation.
A W3C browser API that lets websites register and authenticate users with public-key credentials stored in security keys, phones or laptops instead of passwords. It is the web half of FIDO2 and the technology behind passkeys.
Example: Call the WebAuthn API to create a passkey when the user clicks "Sign in without a password".
Usage notes
Became a W3C Recommendation in March 2019, with Level 2 following in 2021. The private key never leaves the authenticator, and each credential is scoped to one website, so stolen server databases and phishing pages yield nothing reusable. Apple, Google and Microsoft sync passkeys across a user's devices through their accounts.
Related abbreviations
More cybersecurity abbreviations
- 2FA – Two-factor authentication
- AAA – Authentication, authorization and accounting
- ABAC – Attribute-based access control
- ACL – Access control list
- AES – Advanced Encryption Standard
- APT – Advanced persistent threat
- ASLR – Address space layout randomization
- ATT&CK – Adversarial Tactics, Techniques, and Common Knowledge
- AV – Antivirus
- BEC – Business email compromise
- BYOD – Bring your own device
- C2 – Command and control