Authenticators
An Authenticator s a cryptographic entity used generate a public key credential and registered by a Relying Party (i.e. an application). This public key is used to authenticate by potentially verifying a user in the form of an authentication assertion and other data.
Authenticators may have additional features such as PIN code or biometric sensors (fingerprint, facial recognition…) that offer user verification.
![](https://webauthn-doc.spomky-labs.com/~gitbook/image?url=https%3A%2F%2F1118136377-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252F-LVNwBmzKc-PDhuJq1DT-2537780914%252Fuploads%252Fgit-blob-10ad08d64797b78eb690319c37c7e7b0f179b01c%252Fimages.jpeg%3Falt%3Dmedia&width=768&dpr=4&quality=100&sign=2da8d530&sv=1)
Physical Authenticators
The authenticator may have different forms. The most common form is a USB device the user plugs into its computer. It can be a paired Bluetooth device or a card with NFC capabilities.
![](https://webauthn-doc.spomky-labs.com/~gitbook/image?url=https%3A%2F%2F1118136377-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252F-LVNwBmzKc-PDhuJq1DT-2537780914%252Fuploads%252Fgit-blob-64b2450087e4895df6ae36805cb5bc8f992c9f00%252Ffido2.jpeg%3Falt%3Dmedia&width=768&dpr=4&quality=100&sign=573f4cb&sv=1)
Software-Based Authenticators
The authenticator can also be software based and integrated in an Operating System ; for example the smartphone using Android or a laptop with Windows 10 can act as an authenticator.
![](https://webauthn-doc.spomky-labs.com/~gitbook/image?url=https%3A%2F%2F1118136377-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252F-LVNwBmzKc-PDhuJq1DT-2537780914%252Fuploads%252Fgit-blob-8645abbb67d65bc7798066f3c5b2ff26b1fb7f5d%252Fwebauthn-android-fennec.png%3Falt%3Dmedia&width=768&dpr=4&quality=100&sign=51f25442&sv=1)
Last updated