The MyAccount WebAuthn API provides operations to enroll, list, and delete Passkey (FIDO2 WebAuthn) enrollments.

Note: As of the 2026.04.0 release, the FIDO2 (WebAuthn) authenticator is now called Passkey (FIDO2 WebAuthn) and there are new settings and updates to the authenticator page layout. There have been no changes to any existing parameter names, values, or endpoint paths. For example, the authenticator key for the Passkey (FIDO2 WebAuthn) authenticator is still webauthn. See Passkeys and WebAuthn.

The registration for a Passkey (FIDO2 WebAuthn) authenticator (also known as the attestation ceremony) involves a challenge request and response. When you enroll a Passkey (FIDO2 WebAuthn) authenticator, use the following endpoints in this order:

1. Start a WebAuthn enrollment. This endpoint returns a random challenge and other data from the Relying Party (RP).
2. Create a WebAuthn enrollment. This endpoint creates and sends a signed response that contains the challenge and other data from the RP.