Edit

Share via


Plugin passkey manager support

This topic describes the plugin credential manager API plugin support for passkey providers on Windows. It showcases a demo app named Contoso Passkey Manager.

Contoso Passkey Manager

Windows 11 supports a plugin model for passkeys. Contoso Passkey Manager is a demo app that demonstrates this passkey provider support.

Warning

Contoso Passkey Manager is designed for passkey creation and usage testing only. Don't use the app for production passkeys.

Step 1: Installation

  1. Set up your development environment for WinUI 3 development (see Install tools for the Windows App SDK).
  2. Clone the Windows-classic-samples GitHub repo for the Contoso Passkey Manager sample app.
  3. In Visual Studio, open the Contoso Passkey Manager solution that you just cloned, carefully follow the instructions at the link above, build the sample, and then run it to confirm installation.

Step 2: Setup

  1. Go to Settings > Accounts > Passkeys, and then Advanced options.
  2. Switch the toggle to On for Contoso Passkey Manager.
  3. Complete the Windows Hello user verification, and now you can save passkeys to the Contoso Passkey Manager.

A screenshot of Windows Hello user verification completed successfully when enabling Contoso Passkey Manager in Settings

Step 3: Passkey creation

  1. Navigate to a website such as webauthn.io.
  2. Create a test user name, and click Register.
  3. You will be prompted, on saving your passkey, with the Contoso Passkey Manager. Click Continue.

A screenshot of creating a passkey for webuthn.io with Contoso Passkey Manager

  1. Complete user verification with Windows Hello, and the passkey is created.
  2. You can see your saved passkeys by opening the Contoso Passkey Manager.
  3. If you want to test different experiences, you can set up a vault lock mechanism and create a vault passkey to simulate the vault unlock user experience when saving a passkey. The Minimize UI toggle simplifies the step that opens the passkey manager, and the experience flow will just be with user verification on Windows Hello versus opening the credential manager.

A screenshot of Contoso Passkey Manager with a passkey saved in the app

Step 4: Passkey authentication

  1. Use the passkey autofill drop down and you will be prompted to complete user verificaition to sign in with you passkey saved to the Contoso Passkey Manager.

A screenshot of authentication with a Contoso Passkey Manager passkey

  1. You've successfully logged in.

Next steps

To integrate with the plugin capability, go to webauthn to find the header files.

See also