PHPackages                             web-auth/webauthn-framework - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. web-auth/webauthn-framework

ActiveSymfony-bundle[Authentication & Authorization](/categories/authentication)

web-auth/webauthn-framework
===========================

FIDO2/Webauthn library for PHP and Symfony Bundle.

5.3.5(1w ago)51090.8k↓49.3%80[6 issues](https://github.com/web-auth/webauthn-framework/issues)2MITPHPPHP >=8.2CI passing

Since Jan 29Pushed 1w ago11 watchersCompare

[ Source](https://github.com/web-auth/webauthn-framework)[ Packagist](https://packagist.org/packages/web-auth/webauthn-framework)[ Docs](https://github.com/web-auth/webauthn-framework)[ GitHub Sponsors](https://github.com/Spomky)[ Patreon](https://www.patreon.com/FlorentMorselli)[ RSS](/packages/web-auth-webauthn-framework/feed)WikiDiscussions 5.4.x Synced 1w ago

READMEChangelog (10)Dependencies (250)Versions (170)Used By (2)Security (4)

Webauthn Framework
==================

[](#webauthn-framework)

[![Build Status](https://github.com/web-auth/webauthn-framework/workflows/Integrate/badge.svg)](https://github.com/web-auth/webauthn-framework/workflows/Integrate/badge.svg)

[![Latest Stable Version](https://camo.githubusercontent.com/9db4aa422a2502e7a0f163a518fc5dd68e19e9cd4df15ab24a5d24c4f943ddde/68747470733a2f2f706f7365722e707567782e6f72672f7765622d617574682f776562617574686e2d6672616d65776f726b2f762f737461626c65)](https://packagist.org/packages/web-auth/webauthn-framework)[![Total Downloads](https://camo.githubusercontent.com/15d1d130b4a1cce09aff8680de661756345173063b522e94c486e86bbc3957ba/68747470733a2f2f706f7365722e707567782e6f72672f7765622d617574682f776562617574686e2d6672616d65776f726b2f646f776e6c6f616473)](https://packagist.org/packages/web-auth/webauthn-framework)[![Latest Unstable Version](https://camo.githubusercontent.com/810ca9fff421e4367246a67bbaa96f57938347b3fdbced326ed9136bdaf02133/68747470733a2f2f706f7365722e707567782e6f72672f7765622d617574682f776562617574686e2d6672616d65776f726b2f762f756e737461626c65)](https://packagist.org/packages/web-auth/webauthn-framework)[![License](https://camo.githubusercontent.com/155f7e97238d26edb749543ab7c88bb0ab5985ddaa8d03e44d3dbfea85716b09/68747470733a2f2f706f7365722e707567782e6f72672f7765622d617574682f776562617574686e2d6672616d65776f726b2f6c6963656e7365)](https://packagist.org/packages/web-auth/webauthn-framework)

[![OpenSSF Scorecard](https://camo.githubusercontent.com/f8f0648f73dfb99674a08159c54f4d5cd2d136593276bde68efec2c1cc1da50b/68747470733a2f2f6170692e736563757269747973636f726563617264732e6465762f70726f6a656374732f6769746875622e636f6d2f7765622d617574682f776562617574686e2d6672616d65776f726b2f6261646765)](https://api.securityscorecards.dev/projects/github.com/web-auth/webauthn-framework)

Webauthn defines an API enabling the creation and use of strong, attested, scoped, public key-based credentials by web applications, for the purpose of strongly authenticating users.

This framework contains PHP libraries and Symfony bundle to allow developers to integrate that authentication mechanism into their web applications.

Documentation
=============

[](#documentation)

The documentation can be read on the following website:

Partnership
===========

[](#partnership)

This project is tested with BrowserStack () 🎉. BrowserStack is an amazing tool that helps in testing apps and browsers. It is especially useful here for debugging or validating features with multiple browsers and platform versions.

Support
=======

[](#support)

I bring solutions to your problems and answer your questions.

If you really love that project and the work I have done or if you want I prioritize your issues, then you can help me out for a couple of 🍻 or more!

[Become a sponsor](https://github.com/sponsors/Spomky)

Or

[![Become a Patreon](https://camo.githubusercontent.com/ef7b855018f1f680eeba6fd1ac470b9c1971ef883b2f4b9fcf41034274510e3f/68747470733a2f2f63352e70617472656f6e2e636f6d2f65787465726e616c2f6c6f676f2f6265636f6d655f615f706174726f6e5f627574746f6e2e706e67)](https://www.patreon.com/FlorentMorselli)

Supported Versions
==================

[](#supported-versions)

The list of the supported versions is available [on this page](https://github.com/web-auth/webauthn-framework/blob/4.8.x/RELEASES.md).

Contributing
============

[](#contributing)

If you discover a security vulnerability within the project, please **don't use the bug tracker and don't publish it publicly**. Instead, all security issues must be sent via the [GitHub Vulnerability Report system](https://github.com/web-auth/webauthn-framework/security).

Licence
=======

[](#licence)

This project is release under [MIT licence](LICENSE).

###  Health Score

74

—

ExcellentBetter than 100% of packages

Maintenance98

Actively maintained with recent releases

Popularity55

Moderate usage in the ecosystem

Community35

Small or concentrated contributor base

Maturity92

Battle-tested with a long release history

 Bus Factor1

Top contributor holds 87% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~18 days

Recently: every ~2 days

Total

147

Last Release

9d ago

Major Versions

4.9.0 → 5.0.02024-07-15

4.9.1 → 5.0.12024-07-20

4.9.2 → 5.1.02025-01-18

4.9.3 → 5.2.42026-03-08

5.4.x-dev → 6.0.x-dev2026-05-31

PHP version history (5 changes)v1.0.0PHP ^7.1

v2.0.0-alpha1PHP ^7.2

v3.3.0PHP >=7.2

v4.0.0PHP >=8.1

5.0.0PHP >=8.2

### Community

Maintainers

![](https://www.gravatar.com/avatar/ccc6c59de7d9ddc53219653bc58f1e082ef83d96632d233eedc0b7097cf80ea3?d=identicon)[Spomky](/maintainers/Spomky)

---

Top Contributors

[![Spomky](https://avatars.githubusercontent.com/u/1091072?v=4)](https://github.com/Spomky "Spomky (971 commits)")[![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4)](https://github.com/dependabot[bot] "dependabot[bot] (77 commits)")[![amenophis](https://avatars.githubusercontent.com/u/2158235?v=4)](https://github.com/amenophis "amenophis (10 commits)")[![mergify[bot]](https://avatars.githubusercontent.com/in/10562?v=4)](https://github.com/mergify[bot] "mergify[bot] (10 commits)")[![szepeviktor](https://avatars.githubusercontent.com/u/952007?v=4)](https://github.com/szepeviktor "szepeviktor (9 commits)")[![joostdebruijn](https://avatars.githubusercontent.com/u/1844089?v=4)](https://github.com/joostdebruijn "joostdebruijn (6 commits)")[![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?v=4)](https://github.com/github-actions[bot] "github-actions[bot] (3 commits)")[![abcang](https://avatars.githubusercontent.com/u/4199439?v=4)](https://github.com/abcang "abcang (2 commits)")[![ausi](https://avatars.githubusercontent.com/u/367169?v=4)](https://github.com/ausi "ausi (2 commits)")[![fritzmg](https://avatars.githubusercontent.com/u/4970961?v=4)](https://github.com/fritzmg "fritzmg (2 commits)")[![marcriemer](https://avatars.githubusercontent.com/u/2915989?v=4)](https://github.com/marcriemer "marcriemer (2 commits)")[![TimWolla](https://avatars.githubusercontent.com/u/209270?v=4)](https://github.com/TimWolla "TimWolla (2 commits)")[![tweis](https://avatars.githubusercontent.com/u/63323?v=4)](https://github.com/tweis "tweis (2 commits)")[![lukewarlow](https://avatars.githubusercontent.com/u/32498324?v=4)](https://github.com/lukewarlow "lukewarlow (1 commits)")[![wouterj](https://avatars.githubusercontent.com/u/749025?v=4)](https://github.com/wouterj "wouterj (1 commits)")[![dorakemon](https://avatars.githubusercontent.com/u/51844896?v=4)](https://github.com/dorakemon "dorakemon (1 commits)")[![ptmkenny](https://avatars.githubusercontent.com/u/1451472?v=4)](https://github.com/ptmkenny "ptmkenny (1 commits)")[![pupaxxo](https://avatars.githubusercontent.com/u/2815664?v=4)](https://github.com/pupaxxo "pupaxxo (1 commits)")[![reedy](https://avatars.githubusercontent.com/u/67615?v=4)](https://github.com/reedy "reedy (1 commits)")[![ruudk](https://avatars.githubusercontent.com/u/104180?v=4)](https://github.com/ruudk "ruudk (1 commits)")

---

Tags

authenticationfactor-authenticationfidofido-u2ffido2hacktoberfestphpsafetynetsymfonysymfony-bundleu2fu2f-protocolwebauthnwebauthn-bundlewebauthn-frameworkwebauthn-librarywebauthn-supportsymfonybundlesymfony-uxfidoFIDO2webauthnSymfony Bundle

###  Code Quality

TestsPHPUnit

Static AnalysisPHPStan, Rector

Code StyleECS

Type Coverage Yes

### Embed Badge

![Health badge](/badges/web-auth-webauthn-framework/health.svg)

```
[![Health](https://phpackages.com/badges/web-auth-webauthn-framework/health.svg)](https://phpackages.com/packages/web-auth-webauthn-framework)
```

###  Alternatives

[web-auth/webauthn-lib

FIDO2/Webauthn Support For PHP

1237.8M117](/packages/web-auth-webauthn-lib)[web-auth/webauthn-symfony-bundle

FIDO2/Webauthn Security Bundle For Symfony

66474.5k8](/packages/web-auth-webauthn-symfony-bundle)[sulu/sulu

Core framework that implements the functionality of the Sulu content management system

1.3k1.4M195](/packages/sulu-sulu)[shopware/core

Shopware platform is the core for all Shopware ecommerce products.

585.4M506](/packages/shopware-core)[sylius/sylius

E-Commerce platform for PHP, based on Symfony framework.

8.5k5.8M710](/packages/sylius-sylius)[easycorp/easyadmin-bundle

Admin generator for Symfony applications

4.3k17.5M370](/packages/easycorp-easyadmin-bundle)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)