webauthn

In WebAuthn, is it possible for two different authenticators to store the same credential ID?


In WebAuthn, is it possible for two different authenticators to store the same credential ID? For example, let's say I registered a credential on my computer and I registered another credential on my phone. Is it possible for my computer to store a credential with the same ID as my phone?


Solution

  • Passkeys are typically stored in multiple authenticators (synced between them), so in this case, the same credential ID will exist in multiple authenticators.

    From a passkey creation standpoint, the odds of two authenticators creating a new passkey with the same credential ID are very low, as Nick mentioned above.