KivTools

Passkey & WebAuthn Credential Inspector LOCAL ONLY

Decode WebAuthn registration or authentication JSON, clientDataJSON, authenticator flags, sign counter, AAGUID, credential ID, and common COSE key fields.

Credential data is parsed only in this browser. This page does not create a credential, call navigator.credentials, or validate a signature against a server challenge.
WebAuthn credential JSONSerialized PublicKeyCredential response
Decoded client and authenticator data

    
Inspect ceremony evidence, verify it server-side
A production relying party must verify challenge, origin, RP ID hash, user presence or verification policy, signature, algorithms, attestation policy, and sign-counter behavior.






    

        
Recent tools:

        

    





    

        

            
KivTools Navigator