FIDO test

Register and sign in with your key

How this test works

This page is a self-contained relying party for …. It uses the browser's WebAuthn API (no WebUSB, no unlock needed), then verifies every response itself: challenge, origin, RP ID hash, flags, attestation and signature. Registered test passkeys are remembered in this browser only. Press BOOTSEL when the key blinks; enter the FIDO PIN when the browser asks.

Register a test passkey

navigator.credentials.create() with attestation "direct" for RP ….

User name

Display name

Passkey type

Discoverable (stored on the key)

Non-discoverable (server-side ID)

Discoverable passkeys use a slot on the key and appear under Manage → Passkeys; the key asks for the FIDO PIN when one is set.

User verification (PIN)

discouraged

preferred

required

Algorithms offered

ES256

EdDSA

RS256

Pico Keys signs with ES256; leave only EdDSA or RS256 on to check that the key rejects unsupported algorithms.

Extensions

credProtect: not requested

level 1

level 2

level 3 (UV required)

hmac-secret (hmacCreateSecret)

Exclude passkeys already registered here (0)

Passkeys registered on this page

Public keys and counters kept in this browser for verifying sign-ins.

No test passkeys yet

Register one above to try signing in.

Origin … · nothing is sent to any server · back to the manager