← Back to release summary

WebAuthn hints

Category
Security
Type
Chromium catches up
Status
Enabled by default (Chrome 128)
Intent stage
None

Summary

The new `hints` parameter[1] in WebAuthn requests allows sites to provide guidance to browsers to guide their UI. The canonical use case are enterprises which know that their internal sites use only security keys and want to be able to communicate that so that browsers focus the UI on that case. But hints also resolve a tension where the current `authenticatorAttachment` parameter is strict: setting it to `platform` excludes all cross-platform options and vice versa. This has proven less than ideal in some cases. [1] https://w3c.github.io/webauthn/#enum-hints

Standards & signals

View on chromestatus.com