# go-webauthn/webauthn

FIDO2 Conformant WebAuthn and Passkey backend library for golang

Repository: https://github.com/go-webauthn/webauthn
Canonical: https://ross.abutalabs.com/products/go-webauthn-webauthn
Language: Go
License: BSD-3-Clause
License Family: permissive
Topics: webauthn, fido2, security, passwordless-authentication, passwordless, ctap2, golang, go, passkeys
Last push: 2026-08-22T07:25:15+00:00

## Health v2 (maintenance only)
Score: 94/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 99, release rhythm 85, longevity 100
- inputs: {"age_days": 1723, "days_push": 11, "days_rel": 103, "gap_med": 11, "n_releases_24m": 22}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1318, forks 111 (observed 2026-08-28T04:04:21.092066+00:00)

## What it is
A FIDO2-conformant WebAuthn and passkey backend library for Go applications. It implements the Web Authentication specification to enable multi-factor, passwordless, or usernameless authentication flows.

## Use cases
- add passkey login to a Go web app
- implement passwordless authentication in Go
- add WebAuthn as a second factor
- verify FIDO2 authenticator registration and assertion responses
- support usernameless sign-in flows
- implement multi-factor authentication with hardware security keys

## When to choose
- you are building a Go backend and need standards-conformant WebAuthn/passkey support
- you want FIDO2 conformance-tested authentication
- you need passwordless or MFA login without third-party auth services

## When to avoid
- your backend is not written in Go
- you need a fully managed hosted authentication service
- you require a stable 1.x API since the library is still version 0 with possible breaking changes

## Facets
- artifact type: library
- maturity: active
- function: auth, security, sdk
- domain: security, web-development, backend
- platform: go, cross-platform
- tags: webauthn, fido2, passkeys, passwordless, ctap2, multi-factor-authentication, web-server

## Member repositories
- go-webauthn/webauthn (main) score 94

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:21.092066+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:47:58.027690+00:00, confidence not recorded.
  - readme: https://github.com/go-webauthn/webauthn (fetched 2026-08-28T04:04:21.092066+00:00, sha ac72bd72f5d0)
- Data as of 2026-08-30T08:39:29.467469+00:00.