WebAuthn platform authenticator detection
Detects whether a user-verifying platform authenticator is available.
Support in current browsers
Checked against the current browser versions recorded in MDN browser data 8.1.5.
| Browser | Minimum | Outcome | Reason |
|---|---|---|---|
| Chrome | 155 | Works | Every required mapped BCD feature is available without a recorded qualification. |
| Edge | 154 | Works | Every required mapped BCD feature is available without a recorded qualification. |
| Firefox | 157 | Works with limits | Every required mapped feature is available, but BCD records one or more qualifications. |
| Safari | 27 | Works | Every required mapped BCD feature is available without a recorded qualification. |
| Chrome for Android | 155 | Works | Every required mapped BCD feature is available without a recorded qualification. |
| Firefox for Android | 157 | Works | Every required mapped BCD feature is available without a recorded qualification. |
| Safari on iOS | 27 | Works | Every required mapped BCD feature is available without a recorded qualification. |
| Android WebView | 155 | Works | Every required mapped BCD feature is available without a recorded qualification. |
| Samsung Internet | 30.0 | Works | Every required mapped BCD feature is available without a recorded qualification. |
How support changed
Each segment groups recorded releases with the same result. Gaps between recorded versions are not filled in. This is support at each release, rather than the planner’s check of every release above a minimum.
Chrome
api.PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable_static- 1 – 6666 recorded releasesNot supported
- 67 – 15588 recorded releasesWorks
Edge
api.PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable_static- 12 – 176 recorded releasesNot supported
- 18 – 15476 recorded releasesWorks
Firefox
api.PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable_static- 1 – 5962 recorded releasesNot supported
- Only supports USB U2F tokens.
- 60 – 15798 recorded releasesWorks with limits
- Only supports USB U2F tokens.
Safari
api.PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable_static- 1 – 12.121 recorded releasesNot supported
- 13 – 2740 recorded releasesWorks
Chrome for Android
api.PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable_static- 18 – 6946 recorded releasesNot supported
- 70 – 15585 recorded releasesWorks
Firefox for Android
api.PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable_static- 4 – 5953 recorded releasesNot supported
- Partial implementation
- Only supports USB U2F tokens.
- 60 – 9122 recorded releasesWorks with limits
- Partial implementation
- Only supports USB U2F tokens.
- 92 – 15766 recorded releasesWorks
Safari on iOS
api.PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable_static- 1 – 12.218 recorded releasesNot supported
- 13 – 2740 recorded releasesWorks
Android WebView
api.PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable_static- 1 – 6941 recorded releasesNot supported
- 70 – 15585 recorded releasesWorks
Samsung Internet
api.PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable_static- 1.0 – 9.423 recorded releasesNot supported
- 10.0 – 30.029 recorded releasesWorks
BCD 8.1.5 · catalogue 2.3.0. Source corrections can change this trace without a new browser release.
What this feature can and cannot do
Helps protect against
- Phishing-prone password dependence
- Credential reuse
Does not guarantee
- Account recovery weaknesses
- Server verification defects
- Authenticator policy
What you need before using it
- A complete WebAuthn registration and authentication flow
Fallback to keep in place
Offer standards-based roaming authenticators and a carefully protected recovery path.