Edit

Share via

Plugin passkey manager support

This topic describes the plugin credential manager API plugin support for passkey providers on Windows. It showcases a demo app named Contoso Passkey Manager.

Contoso Passkey Manager

Windows 11 supports a plugin model for passkeys. Contoso Passkey Manager is a demo app that demonstrates this passkey provider support.

Warning

Contoso Passkey Manager is designed for passkey creation and usage testing only. Don't use the app for production passkeys.

Step 1: Installation

  1. Set up your development environment for WinUI 3 development (see Install tools for the Windows App SDK).
  2. Clone the Windows-classic-samples GitHub repo for the Contoso Passkey Manager sample app.
  3. In Visual Studio, open the Contoso Passkey Manager solution that you just cloned, carefully follow the instructions at the link above, build the sample, and then run it to confirm installation.

Step 2: Setup

  1. Go to Settings > Accounts > Passkeys, and then Advanced options.
  2. Switch the toggle to On for Contoso Passkey Manager.
  3. Complete the Windows Hello user verification, and now you can save passkeys to the Contoso Passkey Manager.

A screenshot of Windows Hello user verification completed successfully when enabling Contoso Passkey Manager in Settings

Step 3: Passkey creation

  1. Navigate to a website such as webauthn.io.
  2. Create a test user name, and click Register.
  3. You will be prompted, on saving your passkey, with the Contoso Passkey Manager. Click Continue.

A screenshot of creating a passkey for webuthn.io with Contoso Passkey Manager

  1. The Contoso Passkey Manager app will open. Click Create to create the credential in Contoso Passkey Manager.
  2. Complete user verification with Windows Hello, and the passkey is created.
  3. You can see your saved passkeys by opening the Contoso Passkey Manager.
  4. If you want to test different experiences, then you can toggle Simulate Vault Unlock to test a vault unlock user experience when saving a passkey. The Minimize UI toggle simplifies the step that opens the passkey manager, and the experience flow will instead just be with user verification on Windows Hello.

A screenshot of Contoso Passkey Manager with a passkey saved in the app

Step 4: Passkey authentication

  1. Input your username, and click Authenticate.
  2. Select to sign in with the passkey saved to the Contoso Passkey Manager.

A screenshot of authentication with a Contoso Passkey Manager passkey

  1. Complete user verification with Windows Hello to authenticate.
  2. You've successfully logged in.

Next steps

To integrate with the plugin capability, go to webauthn to find the header files.

See also