Glossary

Sync fabric

The infrastructure used to implement the syncing of passkeys between instances of a browser in different devices controlled by the same user.

A user's sync fabric

The set of instances of a browser controlled by the user at a particular time, e.g. the set of instances of Chrome in devices where the user is logged in to Google.

Public key certificate

A collection of user attributes bound to a public key by the signature of a credential issuer.

Public key third-party credential

A public key certificate along with the private key associated with the public key bound to the attributes in the certificate. Abbreviated as public key credential when no confusion is possible with the concept of public key credential in WebAuthn.

Public key JSON certificate

A public key certificate encoded in JSON. Abbreviated as JSON certificate when on confusion is possible with concepts such as course-completion certificates or certificates used in a supply chain.

Fusion credential

A credential comprising a combination of credentials or authentication factors that provides more security than the separate use of the same credentials or factors.

Passkey-fused credential

A public key third-party credential comprising a public key certificate and a passkey, the certificate binds use attributes to the public key of the passkey, and is encrypted under a symmetric key stored in the passkey as the user.id parameter. A more precise definition can be found in the blog post Passkey-fused credentials: definition, protocols and use cases.

Passkey-fused JSON credential

A passkey-fused credential where the certificate is encoded in JSON.