New: Cookbooks and AI ExplanationsStep-by-Step recipes to solve problems connected to Roadmaps and Cheat Sheets. Need more details? Use AI buttons for structured and simple explanations with concrete examples throughout the whole platform.Take a look
I don't own a security key or a second phone, so I can't tell if my passkey code actually works before I ship it.
What you'll have at the end
A signed-in test account, created and logged into purely with a virtual authenticator, no phone or key used.
You need
A signup and sign-in flow already calling the passkey registration and authentication browser calls against your own server, reachable in Chrome over HTTPS or on localhost.
Not covered
Testing a real Touch ID, Face ID, or Windows Hello prompt, or the phone-scans-a-QR-code cross-device flow, since a virtual authenticator only ever emulates the software side of the ceremony.
Gate a passkey button behind a real support check
go there first if your sign-in screen doesn't yet decide when to show a passkey option at all; this recipe just needs the registration and sign-in calls reachable, gated or not.
A WebAuthn error that reaches the user as something went wrong
go there to turn the same overloaded rejection this recipe reproduces into a message that actually tells the two failures apart.
Checked 22 Aug 2026
Part of the Web Authentication and Passkeys cookbook