{"id":2428,"date":"2019-03-19T06:00:57","date_gmt":"2019-03-19T13:00:57","guid":{"rendered":"https:\/\/blog.mozilla.org\/security\/?p=2428"},"modified":"2019-03-18T14:09:40","modified_gmt":"2019-03-18T21:09:40","slug":"passwordless-web-authentication-support-via-windows-hello","status":"publish","type":"post","link":"https:\/\/blog.mozilla.org\/security\/2019\/03\/19\/passwordless-web-authentication-support-via-windows-hello\/","title":{"rendered":"Passwordless Web Authentication Support via Windows Hello"},"content":{"rendered":"<p>Firefox 66, being released this week, supports using the Windows Hello feature for <a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API\/Web_Authentication_API\">Web Authentication<\/a> on Windows 10, enabling a passwordless experience on the web that is hassle-free and more secure. Firefox has <a href=\"https:\/\/hacks.mozilla.org\/2018\/01\/using-hardware-token-based-2fa-with-the-webauthn-api\/\">supported Web Authentication for all desktop platforms since version 60<\/a>, but Windows 10 marks our first platform to support the new <a href=\"https:\/\/fidoalliance.org\/fido2\/\">FIDO2<\/a> \u201cpasswordless\u201d capabilities for Web Authentication.<\/p>\n<div id=\"attachment_2429\" style=\"width: 262px\" class=\"wp-caption alignright\"><a href=\"https:\/\/blog.mozilla.org\/security\/files\/2019\/03\/pin.png\"><img aria-describedby=\"caption-attachment-2429\" decoding=\"async\" loading=\"lazy\" class=\"size-medium wp-image-2429\" src=\"https:\/\/blog.mozilla.org\/security\/files\/2019\/03\/pin-252x324.png\" alt=\"A Windows 10 dialog box prompting for a Web Authentication credential\" width=\"252\" height=\"324\" srcset=\"https:\/\/blog.mozilla.org\/security\/files\/2019\/03\/pin-252x324.png 252w, https:\/\/blog.mozilla.org\/security\/files\/2019\/03\/pin-768x988.png 768w, https:\/\/blog.mozilla.org\/security\/files\/2019\/03\/pin-600x772.png 600w, https:\/\/blog.mozilla.org\/security\/files\/2019\/03\/pin.png 1007w\" sizes=\"(max-width: 252px) 100vw, 252px\" \/><\/a><p id=\"caption-attachment-2429\" class=\"wp-caption-text\">PIN Prompt on Windows 10 2019 April release<\/p><\/div>\n<p>As of today, Firefox users on the <a href=\"https:\/\/insider.windows.com\/en-us\/how-to-overview\/\">Windows Insider Program\u2019s fast ring<\/a> can use any authentication mechanism supported by Windows for websites via Firefox. That includes face or fingerprint biometrics, and a wide range of external security keys via the <a href=\"https:\/\/fidoalliance.org\/specs\/fido-v2.0-rd-20170927\/fido-client-to-authenticator-protocol-v2.0-rd-20170927.html\">CTAP2 protocol from FIDO2<\/a>, as well as existing deployed <a href=\"https:\/\/fidoalliance.org\/specs\/fido-u2f-v1.2-ps-20170411\/fido-u2f-hid-protocol-v1.2-ps-20170411.html\">CTAP1 FIDO U2F-style security keys<\/a>. Try it out and give us feedback on your experience.<\/p>\n<p>For the rest of Firefox users on Windows 10, the upcoming update this spring will enable this automatically.<\/p>\n<p>Akshay Kumar from Microsoft\u2019s Windows Security Team contributed this support to Firefox. We thank him for making this feature happen, and the Windows team for ensuring that all the Web Authentication features of Windows Hello were available to Firefox users.<\/p>\n<p>For Firefox users running older versions of Windows, Web Authentication will continue to use our <a href=\"https:\/\/github.com\/jcjones\/u2f-hid-rs\/\">Rust-implemented CTAP1 protocol support<\/a> for U2F-style USB security keys. We will continue work toward providing CTAP2\/FIDO2 support on all of our other platforms, including older versions of Windows.<\/p>\n<p>For Firefox ESR users, this Windows Hello support is currently planned for ESR 60.0.7, being released mid-May.<\/p>\n<p>If you haven\u2019t used Web Authentication yet, adoption by major websites is underway. You can try it out at a variety of demo sites: <a href=\"https:\/\/webauthn.org\/\">https:\/\/webauthn.org\/<\/a>, <a href=\"https:\/\/webauthn.io\/\">https:\/\/webauthn.io\/<\/a>, <a href=\"https:\/\/webauthn.me\/\">https:\/\/webauthn.me\/<\/a>,\u00a0<a href=\"https:\/\/webauthndemo.appspot.com\/\">https:\/\/webauthndemo.appspot.com\/<\/a>, or <a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API\/Web_Authentication_API\">learn more about it on MDN<\/a>.<\/p>\n<p>If you want to try the Windows Hello support in Firefox 66 on Windows 10 before the April 2019 update is released, you can do so via the <a href=\"https:\/\/insider.windows.com\/en-us\/\">Windows Insider<\/a> program. You\u2019ll need to use t<a href=\"https:\/\/insider.windows.com\/en-us\/how-to-overview\/\">he \u201cfast\u201d ring of updates<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Firefox 66, being released this week, supports using the Windows Hello feature for Web Authentication on Windows 10, enabling a passwordless experience on the web that is hassle-free and more &hellip; <a class=\"go\" href=\"https:\/\/blog.mozilla.org\/security\/2019\/03\/19\/passwordless-web-authentication-support-via-windows-hello\/\">Read more<\/a><\/p>\n","protected":false},"author":1349,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[30,69],"tags":[41994,320800,320795,320796,320798,317652],"coauthors":[45540],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Passwordless Web Authentication Support via Windows Hello - Mozilla Security Blog<\/title>\n<meta name=\"description\" content=\"Firefox 66 supports using the Windows Hello feature for Web Authentication on Windows 10, enabling a passwordless experience on the web that is hassle-free and more secure.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.mozilla.org\/security\/2019\/03\/19\/passwordless-web-authentication-support-via-windows-hello\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"J.C. Jones\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/2019\/03\/19\/passwordless-web-authentication-support-via-windows-hello\/\",\"url\":\"https:\/\/blog.mozilla.org\/security\/2019\/03\/19\/passwordless-web-authentication-support-via-windows-hello\/\",\"name\":\"Passwordless Web Authentication Support via Windows Hello - Mozilla Security Blog\",\"isPartOf\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/2019\/03\/19\/passwordless-web-authentication-support-via-windows-hello\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/2019\/03\/19\/passwordless-web-authentication-support-via-windows-hello\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blog.mozilla.org\/security\/files\/2019\/03\/pin-252x324.png\",\"datePublished\":\"2019-03-19T13:00:57+00:00\",\"dateModified\":\"2019-03-18T21:09:40+00:00\",\"author\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/f2bfcea9a0c404ce2431925922bedbde\"},\"description\":\"Firefox 66 supports using the Windows Hello feature for Web Authentication on Windows 10, enabling a passwordless experience on the web that is hassle-free and more secure.\",\"breadcrumb\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/2019\/03\/19\/passwordless-web-authentication-support-via-windows-hello\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.mozilla.org\/security\/2019\/03\/19\/passwordless-web-authentication-support-via-windows-hello\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/2019\/03\/19\/passwordless-web-authentication-support-via-windows-hello\/#primaryimage\",\"url\":\"https:\/\/blog.mozilla.org\/security\/files\/2019\/03\/pin.png\",\"contentUrl\":\"https:\/\/blog.mozilla.org\/security\/files\/2019\/03\/pin.png\",\"width\":1007,\"height\":1296,\"caption\":\"PIN Prompt on Windows 10 2019 April release\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/2019\/03\/19\/passwordless-web-authentication-support-via-windows-hello\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blog.mozilla.org\/security\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Passwordless Web Authentication Support via Windows Hello\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/#website\",\"url\":\"https:\/\/blog.mozilla.org\/security\/\",\"name\":\"Mozilla Security Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.mozilla.org\/security\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/f2bfcea9a0c404ce2431925922bedbde\",\"name\":\"J.C. Jones\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/image\/d063fc46e7671301c178b2781210dff7\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/64eb1412c9354cf356df31936368cdac?s=96&d=identicon&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/64eb1412c9354cf356df31936368cdac?s=96&d=identicon&r=g\",\"caption\":\"J.C. Jones\"},\"description\":\"Keeping people safe on the 'net. Cryptography Engineering lead for Firefox.\",\"sameAs\":[\"https:\/\/tacticalsecret.com\/\",\"https:\/\/x.com\/JamesPugJones\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Passwordless Web Authentication Support via Windows Hello - Mozilla Security Blog","description":"Firefox 66 supports using the Windows Hello feature for Web Authentication on Windows 10, enabling a passwordless experience on the web that is hassle-free and more secure.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.mozilla.org\/security\/2019\/03\/19\/passwordless-web-authentication-support-via-windows-hello\/","twitter_misc":{"Written by":"J.C. Jones","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/blog.mozilla.org\/security\/2019\/03\/19\/passwordless-web-authentication-support-via-windows-hello\/","url":"https:\/\/blog.mozilla.org\/security\/2019\/03\/19\/passwordless-web-authentication-support-via-windows-hello\/","name":"Passwordless Web Authentication Support via Windows Hello - Mozilla Security Blog","isPartOf":{"@id":"https:\/\/blog.mozilla.org\/security\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.mozilla.org\/security\/2019\/03\/19\/passwordless-web-authentication-support-via-windows-hello\/#primaryimage"},"image":{"@id":"https:\/\/blog.mozilla.org\/security\/2019\/03\/19\/passwordless-web-authentication-support-via-windows-hello\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.mozilla.org\/security\/files\/2019\/03\/pin-252x324.png","datePublished":"2019-03-19T13:00:57+00:00","dateModified":"2019-03-18T21:09:40+00:00","author":{"@id":"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/f2bfcea9a0c404ce2431925922bedbde"},"description":"Firefox 66 supports using the Windows Hello feature for Web Authentication on Windows 10, enabling a passwordless experience on the web that is hassle-free and more secure.","breadcrumb":{"@id":"https:\/\/blog.mozilla.org\/security\/2019\/03\/19\/passwordless-web-authentication-support-via-windows-hello\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.mozilla.org\/security\/2019\/03\/19\/passwordless-web-authentication-support-via-windows-hello\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/security\/2019\/03\/19\/passwordless-web-authentication-support-via-windows-hello\/#primaryimage","url":"https:\/\/blog.mozilla.org\/security\/files\/2019\/03\/pin.png","contentUrl":"https:\/\/blog.mozilla.org\/security\/files\/2019\/03\/pin.png","width":1007,"height":1296,"caption":"PIN Prompt on Windows 10 2019 April release"},{"@type":"BreadcrumbList","@id":"https:\/\/blog.mozilla.org\/security\/2019\/03\/19\/passwordless-web-authentication-support-via-windows-hello\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.mozilla.org\/security\/"},{"@type":"ListItem","position":2,"name":"Passwordless Web Authentication Support via Windows Hello"}]},{"@type":"WebSite","@id":"https:\/\/blog.mozilla.org\/security\/#website","url":"https:\/\/blog.mozilla.org\/security\/","name":"Mozilla Security Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.mozilla.org\/security\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/f2bfcea9a0c404ce2431925922bedbde","name":"J.C. Jones","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/image\/d063fc46e7671301c178b2781210dff7","url":"https:\/\/secure.gravatar.com\/avatar\/64eb1412c9354cf356df31936368cdac?s=96&d=identicon&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/64eb1412c9354cf356df31936368cdac?s=96&d=identicon&r=g","caption":"J.C. Jones"},"description":"Keeping people safe on the 'net. Cryptography Engineering lead for Firefox.","sameAs":["https:\/\/tacticalsecret.com\/","https:\/\/x.com\/JamesPugJones"]}]}},"_links":{"self":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/posts\/2428"}],"collection":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/users\/1349"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/comments?post=2428"}],"version-history":[{"count":0,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/posts\/2428\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/media?parent=2428"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/categories?post=2428"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/tags?post=2428"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/coauthors?post=2428"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}