WebAuthn support is not uniform across browsers. For services implementing WebAuthn, it is vital to note which user environments are supported, and have the appropriate error handling in the event of an unsupported browser.
Feature is supported |
Feature is not supported |
|
|
|
User Presence - The browser supports a physical user interaction to establish an event is not being initiated by a remote attacker.
Resident Key / Discoverable Credential - The browser supports WebAuthn credentials stored on the authenticator. These credentials can be read to identify the user account without the user manually providing them.
User Verification (PIN / Biometric) - The browser supports an interface to allow a user to verify their identity via entering a WebAuthn PIN or Biometric.
CTAP 1 / U2F Legacy Support - The browser has legacy support for authenticators only supporting U2F.
Browser |
User Presence (touch) |
Resident Key / Discoverable Credential |
User Verification (PIN / Biometric) |
CTAP 1 / U2F Legacy Support |
|
Edge Chromium 85 |
USB |
|
|
|
|
NFC |
|
|
|
|
|
Chrome 85* |
USB |
|
|
|
|
NFC |
|
|
|
|
|
Firefox 81 |
USB |
|
|
|
|
NFC |
|
|
|
|
|
*Notes on Chrome differences from other browsers
When a request to create a credential with a resident key is made User Verification is enforced even if the request has UV = 0.
NFC tests have been excluded since NFC is not supported on macOS browsers.
Apple is working on User Verification (PIN) support: https://bugs.webkit.org/show_bug.cgi?id=191516
Browser |
User Presence (touch) |
Resident Key / Discoverable Credential |
User Verification (PIN / Biometric) |
CTAP 1 / U2F Legacy Support |
|
Safari 14* |
USB |
|
|
|
|
NFC |
N/A |
N/A |
N/A |
N/A |
|
Chrome 85 |
USB |
|
|
|
|
NFC |
N/A |
N/A |
N/A |
N/A |
|
Firefox 81** |
USB |
|
|
|
|
NFC |
N/A |
N/A |
N/A |
N/A |
|
*User verification (PIN) and resident key (account selection) should be supported in v14 (Safari 14 Beta Release Notes)
**Bug for FIDO2 support on MacOS: https://bugzilla.mozilla.org/show_bug.cgi?id=1530370
Verified with iPhone XS and iPhone8
Browser |
User Presence (touch) |
Resident Key / Discoverable Credential |
User Verification (PIN / Biometric) |
CTAP 1 / U2F Legacy Support |
|
Safari 14 |
Lightning |
|
|
|
|
NFC |
|
|
|
|
|
Chrome 85 |
Lightning |
|
|
|
|
NFC |
|
|
|
|
|
Firefox 81 |
Lightning |
|
|
|
|
NFC |
|
|
|
|
|
Verified with iPad 6th generation (not iPad Pro)
NFC tests have been excluded since NFC is not supported on iPadOS browsers.
Browser |
User Presence (touch) |
Resident Key / Discoverable Credential |
User Verification (PIN / Biometric) |
CTAP 1 / U2F Legacy Support |
|
Safari 14 |
Lightning |
|
|
|
|
NFC |
N/A |
N/A |
N/A |
N/A |
|
Chrome 85 |
Lightning |
|
|
|
|
NFC |
N/A |
N/A |
N/A |
N/A |
|
Firefox 81 |
Lightning |
|
|
|
|
NFC |
N/A |
N/A |
N/A |
N/A |
|
Verified with Pixel 3a
Browser |
User Presence (touch) |
Resident Key / Discoverable Credential |
User Verification (PIN / Biometric) |
CTAP 1 / U2F Legacy Support |
|
Chrome 85 |
USB |
|
|
|
|
NFC |
|
|
|
|
|
Firefox 81 |
USB |
|
|
|
|
NFC |
|
|
|
|
|