liveBook · Manning

Platform authenticator

As explained in Software Security for Developers

A platform authenticator is an authenticator integrated into a computing device or operating system that performs WebAuthn credential operations.

A platform authenticator is built into a device or operating system and performs WebAuthn credential operations. It lets a browser register or use a passkey through local verification such as a PIN, fingerprint, or face scan. section 15.3

During WebAuthn registration, the platform authenticator:

  • Prompts for the device's configured verification method, such as Windows Hello PIN, Touch ID, or Android biometrics. section 15.3

Registering on localhost

A page served from localhost starts registration with navigator.credentials.create(). Windows Hello may request a PIN before saving a passkey for localhost; another device may request a fingerprint or face scan.

How Software Security for Developers covers it

How deep it goes
Explains platform selection, user prompts, credential creation, and backend handoff, but defers detailed authenticator internals.
Examples
Demonstrates Windows Hello PINs, fingerprints, facial recognition, macOS Touch ID, Android biometrics, and localhost registration.
What it assumes
Assumes a WebAuthn-capable browser and a configured device verification method, while showing browser support detection.
What you can do after
Apply it via WebAuthn by requesting platform attachment and recognizing the device's native verification prompt.
How it connects
Connects WebAuthn with passkeys, public-key credentials, user verification, and external security keys.
Cover of Software Security for Developers
liveBookmanning.com
Read Software Security for Developers on liveBook Get the book at manning.com

This explainer was generated by Manning's knowledge graph from the text of Software Security for Developers. The section links point to the parts of the book it draws on.