Passkey Encryption

Derive an AES-GCM key from a passkey via the WebAuthn PRF extension. The key material never leaves this browser. 


      


      

        
        
        
        
        

      


      

        
        
        
        
        

      


      

        Server-persisted record
        

          The passkey private key never leaves the authenticator, and the client stores
          nothing. The server keeps only the record below.