Passkey checker
Can this browser create a passkey? Where does it end up, and will it follow you to your other devices? Find out in ten seconds, without sending anything anywhere.
1. What this browser can do
Read automatically from the WebAuthn API, nothing to click.
...
2. Create a test passkey
Your browser will ask you to confirm with your fingerprint, face, PIN or a security key, exactly like on any site. A passkey named 'PwdFortress passkey test' is saved in your provider. No data is sent to us, and the deletion steps are shown with the result.
How the check works
Step one reads what the browser says about itself through the WebAuthn API: whether passkeys exist at all here, whether the device has a built-in authenticator (Windows Hello, Touch ID, Face ID, Android screen lock), whether sign-in suggestions can appear in the username field, and whether a phone can be used by QR code.
Step two creates a real passkey for this site under the name 'PwdFortress passkey test'. The browser answers with a block of authenticator data. The tool reads two things in it: the AAGUID, a 16-byte identifier that passkey providers use to say who they are, and the backup-eligible flag, which tells whether this passkey is synced by its provider or bound to this one device. The AAGUID is matched against the community list maintained by passkey developers (read on 18 October 2026).
There is no server involved. The public key the browser returns is thrown away, the challenge is random and never checked, and the test passkey can be deleted from your provider right after.
What leaves your device: nothing
The page makes no network request during the test. Your biometric data never leaves the device anyway: WebAuthn only returns a public key and metadata. You can confirm this in the Network tab of your browser's developer tools.
- W3C WebAuthn Level 3, section 6.1 Authenticator Data (flags BE, BS, AT; AAGUID layout) www.w3.org/TR/webauthn-3/#sctn-authenticator-data
- AAGUID to provider list, passkeydeveloper community (read 2026-10-18) github.com/passkeydeveloper/passkey-authenticator-aaguids
- Proton Pass pricing: passkeys included on every plan (read 2026-10-18) proton.me/pass/pricing
- NordPass passkeys page (read 2026-10-18) nordpass.com/passkeys/
What this tool cannot tell you
The browser may hide the provider: with attestation set to 'none', most hardware security keys return an all-zero AAGUID, and the tool says so instead of guessing. The result describes the provider that answered this time; if you have several (a manager extension and the system store), the picker you chose decides. The 'synced' flag means the provider is allowed to sync the passkey, not that it already has on every device.
Frequently asked questions
Is it safe to create a test passkey?
Yes. A passkey is a key pair created for one site, here pwdfortress.com. It cannot be used anywhere else, no secret leaves your device, and you can delete it from your provider afterwards. It has the same security properties as a passkey for any other site.
Why does the tool say my passkey is bound to this device?
The authenticator data carries a backup-eligible flag. When it is 0, the provider created a single-device credential: Windows Hello without a sync provider, a hardware security key, or a browser profile store. Losing the device means losing the passkey, so you need a second method or a provider that syncs.
My passkey went to iCloud Keychain or Google Password Manager. Is that a problem?
Not within that ecosystem. iCloud Keychain syncs to Apple devices signed into the same iCloud account; Google Password Manager syncs to Android devices and Chrome profiles signed into the same Google account. The friction appears when you mix an iPhone with a Windows PC, or Android with a Mac. A cross-platform password manager is the usual answer.
Which password managers store passkeys on a free plan?
On 18 October 2026, Proton Pass lists passkeys as included in every plan including Free, with unlimited devices. NordPass supports passkeys on all its plans; its free plan keeps one device active at a time. Bitwarden also stores passkeys for free but is not an affiliate partner of this site.
Why is the AAGUID shown as hidden?
Browsers replace the AAGUID with zeros for authenticators that would otherwise reveal a hardware model when the site asked for no attestation. Passkey providers such as Apple, Google, Microsoft and password managers keep their AAGUID visible so that sites can show a provider icon.