WebAuthn Virtual Authenticator

WebAuthn Virtual Authenticator lets you register and sign in on websites that use passkeys or security keys (WebAuthn / FIDO2), without owning a hardware security key. HOW IT WORKS • Register: when a website asks you to create a passkey or add a security key, a confirmation window opens. It shows the site and its domain. Pick which of your virtual keys should hold the new credential, then confirm, or cancel. • Sign in: on a site where you registered, the extension answers the sign-in request with the credential saved for that site. • Manage: the management page lists every key in your account and the credentials on it (site, user name, date created, counter). You can rename keys and delete credentials you no longer need. • On or off: the toolbar button switches between HOOK and NATIVE. In HOOK mode the extension handles WebAuthn requests. In NATIVE mode it stays out of the way and the browser uses your own devices as usual. YOUR KEYS LIVE IN THE CLOUD Your keys are kept in your account on the WebAuthn Virtual Authenticator cloud service, not on one computer. Sign in to the extension in another browser and the same keys work there too. WHO IT IS FOR • Teams that build or test websites with passkey or security-key login and need many authenticators without buying hardware. • People who want security-key sign-in on sites that require it, managed from one account. BEFORE YOU INSTALL • You need an account. Accounts are created by your administrator, who gives you a user ID. You set your password the first time you sign in. • The cloud service creates and signs credentials on your behalf, so it can act for your keys. Only use it with an account and administrator you trust. • When a site makes a WebAuthn request, the extension sends that request and the site's address to the service. On your computer it keeps only your sign-in state and a copy of your keys and credentials list (for the management page). • The extension runs on all websites so that it can answer WebAuthn requests wherever they happen. It only handles WebAuthn requests; it does not read or change the rest of the page. • No ads, no tracking, no analytics.