CODEWITHSUNDEEP
windows-securitywebauthnwindows-hello
Sasxa
Sasxa

Reputation: 41274

Remove credentials created with Web Authentication API

Does anyone know where the security credentials from Windows Hello are located and how to delete them?

I am implementing authentication with Web Authentication API and while working on the code I created hundreds of credentials, which I would like to delete somehow.

navigator.credential.get({ ... })

Just calling get() takes a minute or two to load all of them and show this dialog:

windows security credentials

Upvotes: 3

Views: 1731

Answers (1)

Jan Gerle
Jan Gerle

Reputation: 236

Citing from superuser.com:

The Microsoft command line tool certutil can be used to view and delete these WebAuthN keys.

Disclaimer: it's very easy to delete the wrong key, so make sure that you are happy to accept the risk that you might delete the wrong key; there is no undo.

To view your WebAuthN keys, from a command prompt, run:

certutil -csp NGC -key

WebAuthN keys have names that look like //FIDO_AUTHENTICATOR//_

You need to identify the key that you want to delete, and then to delete a WebAuthN key, from an administrator command prompt, run:

certutil -csp NGC -delkey

Spontaneous hint, use Chrome with the dev tools and an emulated platform authenticator: https://developer.chrome.com/docs/devtools/webauthn/

Upvotes: 9

Related Questions