mdn/content

WebAuthn conditional create is not documented

Open

#42516 opened on Dec 24, 2025

View on GitHub
 (0 comments) (0 reactions) (0 assignees)Markdown (8,900 stars) (22,427 forks)batch import
Content:WebAPIarea: WebAuthndocument not writtenhelp wanted

Description

https://github.com/w3c/webappsec-credential-management/pull/224 added a mediation option to CredentialsContainer.create(), to enable websites to support conditional create, AKA automatic passkey creation.

This should be documented on MDN.

In fact it would be good to rework https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API#discoverable_credentials_and_conditional_mediation, to make it clear that it's really about autofill (and to downplay the stuff about discoverable credentials), and move it into a separate guide page that also covered conditional create.

Contributor guide

Tech stack
javascript
Domain
documentation
Issue type
documentation
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
fresh
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
WebAuthn API basicsMDN contribution guide
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
80
Research direction
The issue requests documenting the `mediation` option for `CredentialsContainer.create()` as part of WebAuthn conditional create. The MDN page at https://developer.mozilla.org/en US/docs/Web/API/Web Authentication API#discoverable credentials and conditional mediation should be reworked to focus on autofill and moved to a separate guide page. A separate guide covering conditional create using the specification (w3c/webappsec credential management#224) and Chrome's developer documentation should be created. No existing pull requests or comments are present, so work can start fresh.