WebAuthn

WebAuthn is a web authentication standard that enables passwordless login using public key cryptography. The private key is securely stored on the user’s device or authenticator, while the public key is registered on the server. Keycloak supports WebAuthn for both passwordless authentication and two-factor authentication (2FA). It enhances security by preventing phishing and credential theft while improving user experience with biometrics, security keys, and passkeys. WebAuthn is widely used for zero-trust security models, offering flexible authentication policies in enterprise environments.