How do I install the Passkeys Web skill?

Run npx skillmds@latest add googlechrome/passkeys-web in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Passkeys Web safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Passkeys Web?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Passkeys Web free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under Apache-2.

Who published Passkeys Web?

googlechrome (@googlechrome) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Passkeys Web by googlechrome — Agent Skill

Name: Passkeys Web
Author: googlechrome

Passkeys Web

A skill for implementing passkey in web applications. You MUST use this skill whenever a user asks about passkey registartion, passkey authentication or passkey management. It defines the required database schema, API usage, and security best practices.

googlechrome 6ba1724 10 files · 40.6 KB Updated Sep 17, 2026 1.6k repo stars

File contents

Passkeys Implementation Guide (Web)

This skill provides a modular guide to implementing passkeys

Implementation Phase

Registration: Allowing users to create new passkeys.
Authentication: Logging users in with passkeys.
Management: Listing, renaming, and deleting passkeys.
Reauthentication: Logging users back in with passkeys.

Evaluation

Evaluate Passkey Skills: Evaluate passkey skills.

References

You MUST read the following references when implementing their respective features:

Conditional Create: Read this before implementing automatic passkey creation or conditional create.
Conditional Mediation: Read this before implementing form autofill based passkey authentication.
Signal API: Read this before implementing any PublicKeyCredential.signal* methods.
AAGUID Resolution: Read this before saving a new credential to the database during registration to map the provider name and icon.

Recommended Libraries

For backend, using a library is recommended. Here's a list of recommended open source libraries per language:

JavaScript/TypeScript: SimpleWebAuthn
Python: py_webauthn
Java: Java WebAuthn Server , WebAuthn4J, LINE FIDO2 Server
.Net: .Net library for FIDO2, WebAuthn.Net
Go: WebAuthn Go Library, Passkey Server
Ruby: WebAuthn Ruby
PHP: WebAuthn PHP Library, WebAuthn Framework

If you are using one of the libraries above, use the following skills:

Use [[simplewebauthn]] skill when implementing passkeys using SimpleWebAuthn

---name: passkeys-webdescription: A skill for implementing passkey in web applications. You MUST use this skill whenever a user asks about passkey registartion, passkey authentication or passkey management. It defines the required database schema, API usage, and security best practices.license: Apache-2.0---# Passkeys Implementation Guide (Web)This skill provides a modular guide to implementing passkeys## Implementation Phase- [Registration](./registration.md): Allowing users to create new passkeys.- [Authentication](./authentication.md): Logging users in with passkeys.- [Management](./management.md): Listing, renaming, and deleting passkeys.- [Reauthentication](./reauthentication.md): Logging users back in with passkeys.## Evaluation- [Evaluate Passkey Skills](./evaluating-passkeys.md): Evaluate passkey skills.## ReferencesYou MUST read the following references when implementing their respective features:- [Conditional Create](./references/conditional-create.md): Read this before implementing automatic passkey creation or conditional create.- [Conditional Mediation](./references/conditional-mediation.md): Read this before implementing form autofill based passkey authentication.- [Signal API](./references/signal-api.md): Read this before implementing any `PublicKeyCredential.signal*` methods.- [AAGUID Resolution](./references/determine-passkey-provider-from-aaguid.md): Read this before saving a new credential to the database during registration to map the provider name and icon.## Recommended LibrariesFor backend, using a library is recommended. Here's a list of recommended open source libraries per language:- JavaScript/TypeScript: [SimpleWebAuthn](https://github.com/MasterKale/SimpleWebAuthn)- Python: [py_webauthn](https://github.com/duo-labs/py_webauthn)- Java: [Java WebAuthn Server](https://github.com/Yubico/java-webauthn-server) , [WebAuthn4J](https://github.com/webauthn4j/webauthn4j), [LINE FIDO2 Server](https://github.com/line/line-fido2-server)- .Net: [.Net library for FIDO2](https://github.com/abergs/fido2-net-lib), [WebAuthn.Net](https://github.com/dodobrands/WebAuthn.Net)- Go: [WebAuthn Go Library](https://github.com/go-webauthn/webauthn), [Passkey Server](https://github.com/teamhanko/passkeys)- Ruby: [WebAuthn Ruby](https://github.com/cedarcode/webauthn-ruby)- PHP: [WebAuthn PHP Library](https://github.com/madwizard-org/webauthn-server), [WebAuthn Framework](https://github.com/web-auth/webauthn-framework)If you are using one of the libraries above, use the following skills:- Use [[simplewebauthn]] skill when implementing passkeys using SimpleWebAuthn

Frequently asked questions