WaaS demo on https://utxos.dev/demo fails with Passkey PRF error

[aljosa]

On macOS Sonoma (14.5) with Google Chrome (Version 144.0.7559.112 / arm64) the demo fails as seen in these screenshots:

[aljosa]

Passkey PRF Extension Support Matrix (January 2025)

Windows

Browser	Version	Platform Auth (Windows Hello)	Security Key	Cross-Device (CDA)
Chrome	116+	❌	✅	✅
Edge	116+	❌	✅	✅
Firefox	139+	❌	✅	✅

Note: Windows Hello does not support the hmac-secret extension required for PRF. Only
external security keys work.

---

macOS

macOS 15+ (Sequoia)

Browser	Version	Platform Auth (iCloud Keychain)	Security Key	Cross-Device (CDA)
Safari	18+	✅	❌	✅
Chrome	132+	✅	✅	✅
Firefox	139+	✅	✅	✅

macOS 14 (Sonoma) and earlier

Browser	Version	Platform Auth	Security Key	Cross-Device (CDA)
All	Any	❌	⚠️	❌

Note: PRF is not supported on macOS Sonoma or earlier. Chrome + YubiKey may work for security
key PRF only.

---

Linux

Browser	Version	Platform Auth	Security Key	Cross-Device (CDA)
Chrome	116+	❌	✅	✅
Firefox	139+	❌	✅	❌
Edge	116+	❌	✅	✅

Note: Linux has no native platform passkey provider. Security keys are the only option. A
custom TPM-based solution
exists for Chrome only.

---

iOS / iPadOS

Browser	Version	Platform Auth (iCloud Keychain)	Security Key	Cross-Device (CDA)
Safari	18+	✅	❌	⚠️
Chrome	Any	✅	❌	⚠️
Firefox	Any	✅	❌	⚠️

⚠️ Warning: iOS 18.0–18.3 has critical bugs causing data loss when used as CDA source. Fixed
in iOS 18.4+.

---

Android

Browser	Version	Platform Auth (Google Password Manager)	Security Key	Cross-Device (CDA)
Chrome	116+	✅	✅ (USB)	✅
Edge	116+	✅	✅ (USB)	✅
Samsung Internet	Latest	✅	✅	✅
Firefox	Any	❌	❌	❌

Note: NFC security keys do not support PRF on Android.

---

Legend

Symbol	Meaning
✅	Fully supported
❌	Not supported
⚠️	Partial support / known issues

---

Key Takeaways

• Best PRF support: Android (Chrome) and macOS 15+ (Chrome)
• Windows: No platform authenticator PRF — Windows Hello lacks hmac-secret support
• Linux: No native platform authenticator — security keys are the only option
• Apple/Safari: No security key PRF support; cross-device flows have bugs on iOS 18.0–18.3
• Firefox: No PRF support on Android; limited support elsewhere

---

Sources

• Corbado: Passkeys & WebAuthn PRF
• Yubico: Developer's Guide to
  PRF
• [MDN: Web Authentication Extensions](https://developer.mozilla.org/en-US/docs/Web/API/Web_Authenti
  cation_API/WebAuthn_extensions)
• Chrome Status: WebAuthn PRF Extension
• Mozilla Bug Tracker: PRF Extension

[aljosa]

I've added the compatibility matrix in hope that maybe there can be a better UX which doesn't suggest passkey if it's not supported.