Passkey & WebAuthn Credential Inspector

Decodes serialized WebAuthn credential responses so developers can inspect clientDataJSON, authenticator flags, sign count, AAGUID, credential ID, and COSE key fields.

Runs locally in your browser
Credential data is parsed only in this browser. This page does not create a credential, call navigator.credentials, or validate a signature against a server challenge.
WebAuthn credential JSONSerialized PublicKeyCredential response
Decoded client and authenticator data

Inspect ceremony evidence, verify it server-side

A production relying party must verify challenge, origin, RP ID hash, user presence or verification policy, signature, algorithms, attestation policy, and sign-counter behavior.

Recent tools: