W3C standard for passwordless authentication in web browsers. Uses public key cryptography with hardware authenticators or platform biometrics to replace passwords.