Skip to main content

Browsers and authenticators

You also need a FIDO2/WebAuthn capable authenticator device. This can be one of the following:

  • A platform authenticator, such as a Windows 10 device with Windows Hello, or a MacBook with Touch ID.
  • A roaming authenticator, that is, a hardware key, for example, YubiKey NFC.
  • A virtual authenticator, for example, Google Chrome's WebAuthn tools. For more information, see the Chrome DevTools documentation, or the official documentation for your tool of choice.

We tested the following authenticator setups, and we know they work.

We recommend to run various tests in your device landscape to make sure that your systems are compatible with the devices of your users.


BrowserSystem requirements, setup
Google Chrome 67+See Chrome browser system requirements
Mozilla Firefox 60+See Firefox System Requirements
Microsoft Edge 18+See Microsoft Edge supported Operating Systems
Apple Safari 13+See Update to the latest version of Safari
Opera 54+See Opera system requirements
Vivaldi 5.0+See Download Vivaldi

For more information, see Web Authentication API.

Platform authenticators

Platform authenticatorSystem requirements, setup
Windows HelloSee Learn about Windows Hello and set it up
iOS FaceIDSee Use Face ID on your iPhone or iPad Pro
iOS TouchIDSee Use Touch ID on iPhone and iPad
Android pattern, fingerprintSee Set screen lock on an Android device
Apple passkeysSee Passkeys

Roaming authenticators

Roaming authenticatorSystem requirements, setup
YubiKey BioSee YubiKey Bio Series – FIDO Edition
YubiKey NFCSee Security Key Series
Token2 T2F2 NFCSee Token2 T2F2-NFC FIDO2, U2F and TOTP Security Key
Token2 T2F2-BioSee Token2 T2F2-Bio FIDO2.1.pre, U2F and TOTP Security Key with Fingerprint protection