Overview
Inspect real WebAuthn/passkey ceremonies in DevTools: log create()/get(), decode options and responses, and flag common mistakes.
WebAuthn Inspector adds a WebAuthn panel to Chrome DevTools for debugging real passkey registration and sign-in ceremonies. Chrome’s built-in WebAuthn tab manages virtual authenticators. WebAuthn Inspector complements it by showing what actually happens when a page calls navigator.credentials.create() or navigator.credentials.get(). For each WebAuthn ceremony, it: • Shows pending, resolved, and rejected calls with timing. • Decodes clientDataJSON, attestationObject, authenticatorData, CBOR, AAGUID, credential public keys, flags, and signature counters. • Compares requested and returned extensions, making missing PRF, credProps, or largeBlob results easy to spot. • Flags common problems such as RP ID and origin mismatches, short challenges, short timeouts, missing user verification, and unsupported algorithms. • Reports browser capabilities, including platform authenticators and conditional mediation. • Copies a redacted ceremony as JSON for bug reports. Privacy Everything runs locally inside DevTools. WebAuthn Inspector has no host permissions, makes no network requests, and includes no analytics or telemetry. Ceremonies are observed only while the WebAuthn panel is open. Credential identifiers, user handles, and cryptographic extension outputs are redacted before copied data leaves the panel. WebAuthn Inspector is free and open source under the MIT License: https://github.com/ddyy/webauthn-inspector
Details
- Version0.1.0
- UpdatedJuly 22, 2026
- Offered byDY Dev
- Size46.95KiB
- LanguagesEnglish (United States)
- Developer
Email
dev@daniel-yang.com - Non-traderThis developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.
Privacy
This developer declares that your data is
- Not being sold to third parties, outside of the approved use cases
- Not being used or transferred for purposes that are unrelated to the item's core functionality
- Not being used or transferred to determine creditworthiness or for lending purposes
Support
For help with questions, suggestions, or problems, visit the developer's support site
