Passkey Playground

I wanted a way to make passkeys less mysterious. Passkey Playground uses the browser's native WebAuthn API to create a real credential and run an authentication ceremony, then leaves the resulting challenge, client data, authenticator data and signature visible so you can see what actually moves through the flow.\n\nIt deliberately stays in the browser: the demo never uploads credential material or asks for an account. It is an exploration tool rather than a production authentication service, so the write-up also calls out the server-side verification a real application still needs.