How to use
When the page opens, it checks this browser and device: the WebAuthn API, the platform authenticator, conditional UI and a secure context. Nothing is created at this stage.
Press “Create a test passkey”. One test passkey is saved in this device’s password manager. Read the notice shown before you press it.
Check the attributes of the new passkey: the attestation format, the flags UP, UV, BE, BS and AT, the AAGUID, the key type and the transports.
Press “Try signing in with this authenticator” to get a signature, then check the counter, user verification and the signature check made with WebCrypto.
When you no longer need it, delete the test passkey in your device or browser password manager.
What it does
Support at a glance
Shows whether the WebAuthn API exists, the platform authenticator, conditional UI, a secure context, and getClientCapabilities (every item, where the browser supports it).
Reads the registration
Decodes the CBOR itself and shows the attestation format, flags, AAGUID, key type (the COSE alg) and transports.
Checks the signature on the spot
Verifies the signature from sign-in with WebCrypto and shows the result. Covers passkeys made with ES256 and RS256, the two algorithms this page asks for.
Plain explanations of failures
Explains each cause, such as cancelling, a timeout, a security restriction or the state of the authenticator, and what to do next.
Sends nothing
Registration and sign-in happen on this device, with no request to any server. The results are not kept on this page.
Use cases
- Check that registration and sign-in work on this device before you add passkeys to your site
- Tell apart the causes of “passkeys do not work” reports, using the browser and device support
- Check through the UV flag whether biometrics or a PIN is verifying the user
- Read a real WebAuthn authenticator data block and signature to learn how they are built
Capability matrix
| Feature | Support | Notes |
|---|---|---|
| WebAuthn API available | Supported | — |
| Platform authenticator (biometrics or PIN) available | Supported | The result of isUserVerifyingPlatformAuthenticatorAvailable() |
| Conditional UI (passkeys offered as suggestions) available | Supported | The result of isConditionalMediationAvailable() |
| Full getClientCapabilities list | Partial | Shown only where the browser supports it |
| Creating a test passkey | Supported | One passkey is saved in this device’s password manager |
| Signing in with it and checking the signature | Supported | ES256 and RS256, the two algorithms this page asks for |
| Showing the authenticator’s product name | Not supported | The AAGUID is shown as a number only; no product list is kept |
| Checking the registration certificate (attestation) | Not supported | The format and contents are read only |
| Server-side registration and verification examples | Not supported | No server code is shown |
| Sending anything to a server or storing it there | Not supported | Everything happens on this device |
| Deleting the test passkey | Not supported | This page cannot remove it; delete it in the device or browser |
Limits & notes
- Each press creates one more test passkey, named “LIBRA Works test”.
- The rp.id is this site’s host name. Passkeys of other sites are not handled.
- When an authenticator hides its model, the AAGUID is all zeros.
Privacy & safety
Checking, registration, sign-in and the signature check all happen in your browser. Nothing is sent to a server. The test passkey is kept in your device’s password manager; this page does not store it.
FAQ
How do I check whether passkeys are supported?
What if the platform authenticator shows false?
What is conditional UI?
What does NotAllowedError mean?
What is an AAGUID?
How do I delete the test passkey?
Related tools
Browser Inspector
A clear list of everything your browser shows to websites without asking — browser, OS, screen, language, GPU — plus support for 60+ features such as WebGPU and video codecs. Results are shown on the spot and never sent anywhere.
TOTP Studio (2FA Code Checker)
For developers testing two-factor authentication: compute TOTP and HOTP codes from a secret, and build or read otpauth:// URIs and QR codes. Everything runs with Web Crypto in your browser; the secret is never sent or stored.
Password Studio — Generator & Strength Checker
A strong 20-character password is ready when the page opens. Fine-tune symbols and excluded characters, switch to a memorable passphrase, or check a password you already use — all without sending anything off your device.
Keyboard Test
Each key lights up on the on-screen keyboard as you press it, so dead keys stand out immediately. Supports US and Japanese JIS layouts with numpad, and measures maximum simultaneous keys and chatter (one press registering twice).
Microphone Test
Start the mic to see input level (dBFS), waveform and spectrum. Clipping, noise and mute are detected automatically, and a guided speak test rates whether your mic is good enough for meetings. Nothing is uploaded.
Mouse & Wheel Test
Test all five mouse buttons and the wheel, and automatically catch “chatter” — single clicks registering as double clicks. Double-click interval, wheel counts, polling rate (Hz) and drag breaks are measured in numbers.
Last updated: