letswebauth.com

What It Is

Let's Webauth is a tutorial and information website focused on Web Authentication (WebAuthn), created by the Mioko team. It aims to help developers worldwide understand and implement passwordless login based on biometrics such as fingerprints and facial recognition, promoting adoption of this W3C recommended standard.

Core Analysis

• Features and Use Cases: The site mainly provides a technical overview of WebAuthn, a glossary, and hands-on tutorials. It focuses on use cases for mobile platform authenticators, helping developers understand how to let users sign in securely using native biometric capabilities on their phones.
• Supported Languages/Frameworks: The frontend uses native JavaScript via the navigator.credentials API, while backend examples are written as PHP pseudocode. Under the hood, it relies on cryptographic algorithms such as ES256 and the CBOR encoding format.
• Open Source and Self-Hosting: The site itself is an informational website, not deployable software, so there is no self-hosting option. Although it provides a GitHub feedback channel, no open-source license is clearly stated. Its related commercial product, Presence, is closed-source paid software.
• APIs/SDKs and Integration: The site does not offer its own API or SDK. Instead, it teaches developers how to integrate browser-native APIs with the operating system’s underlying biometric capabilities, making it more of a low-level standards guide.
• Documentation Quality: The documentation breaks the process into two stages, Attestation (registration) and Assertion (authentication), and includes pseudocode with a clear logical flow. However, the author explicitly notes that the pseudocode has gaps developers must fill themselves, such as CBOR decoding. The project is also still under construction and does not yet cover security keys, so overall completeness is moderate.

Pricing

The tutorial content on the website is completely free. Its related commercial product, Presence, uses a paid model with an initial free trial.

Pros and Cons

Its strengths are its focus on high-coverage mobile biometric scenarios, its basis in W3C standards, and its frontend/backend pseudocode, which lowers the barrier to getting started. Its drawbacks are that the project is unfinished, the code is incomplete, implementation may be challenging for beginners, and security key tutorials are currently missing.

Who It’s For

Best suited for intermediate to advanced developers who want to add passwordless authentication to web applications and already have some frontend and backend development experience.

Access in China

As a purely static informational website, it is usually accessible directly from mainland China, with very low risk of network restrictions. There is no payment flow involved. Alternatives include similar community resources such as webauthn.io.