We want to hear from you! We are looking for web developers to participate in user research, product testing, discussion groups and more. Apply now to join our WebDev Insights Community.

Identity

Explore identity on the web and dive deep into advanced authentication systems! Here you'll find resources on how to build robust systems with modern APIs and create user-friendly experiences for signing in, signing up, and signing out. Explore articles, courses, and real-world success stories.

Authentication fundamentals

Learn how to build sign-in and sign-up forms that are secure, accessible and easy to use, with cross-platform browser features like password management and form validation.

New to HTML forms?

Master HTML forms to help you improve your web developer expertise! Our Learn Forms course breaks down HTML forms into easy to understand pieces and guides you through form elements, styling forms, helping users re-entering data, ensuring the form is accessible and secure, testing your forms, and more.

Passkeys

Passkeys are an easier and more secure replacement for passwords, enabling users to sign in to their account by unlocking their device screen. Learn more about passkeys and how to implement them in your web app.

Password Manager compatible

Help your users stay safe and secure by integrating with password managers for seamless cross-device sign-in across sites and apps along with automated password updates.

Autofill

Browsers can help users enter form parameters faster, and avoid re-entering them. This module teaches you how autofill works, and how `autocomplete` and other element attributes can ensure that browsers offer appropriate autofill options.

Change the password easily

Set up /.well-known/change-password to redirect to your change password page, so the password manager can bring users straight there.
For sites (and apps!) that share a single sign-on make use of Digital Asset Links to make sure the password manager knows it's all the same account.

Streamline SMS based two-factor authentication user experience

SMS OTP form best practices

Learn how to implement SMS OTP forms for two-factor authentication efficiently. This article provides cross-browser best practices for using the WebOTP API and HTML form elements for a seamless user experience.

Verify phone numbers on the web with the WebOTP API

Learn how to improve the user-experience of phone number verification by programmatically getting an OTP from an SMS message.

Verify a phone number on desktop using WebOTP API

WebOTP helps users enter a phone number verification code in one tap on a mobile website. It's available for desktop as well.

Identity federation

Identity federation delegates authentication or authorization of an individual (user or entity) to a trusted external party (an identity provider or IdP).

Case studies

Yahoo! JAPAN's password-free authentication reduced inquiries by 25%, sped up sign-in time by 2.6x

Discover how Yahoo! JAPAN moved from password-based to passwordless authentication.

Goibibo dropped OTP retry on sign-up by 25% with WebOTP

As secure authentication is a big challenge in India, Goibibo used the WebOTP API to reduce sign-in friction on their PWA.