Passkey Town

WebAuthn, end to end, as a place you can look at

Drag to orbit · scroll to zoom · click any building

The whole flow

The scenario

Starting point

In the town

The other three flows are a cartoon. This one is not. It calls navigator.credentials.create() against your real authenticator, keeps the public key in localStorage, and verifies the signature with WebCrypto. No server, nothing leaves the page.

RequiresHTTPS, or localhost during development

Browsers refuse to create a passkey inside an embedded frame. Chrome rejects the call outright and Safari blocks it entirely, because a credential should only ever be created by the site the user can see in the address bar. That restriction is doing its job right now.

Open the live demo in its own tab →