21-12-2025

Android, NFC, and the Missing Piece of WebAuthn

For years, Android users have faced a frustrating limitation—Android does not support CTAP2 over NFC. In practice, this means no PIN verification and no discoverable credentials (passkeys) when using NFC. USB-C keys have much better support, but NFC keys are limited to simple tap-to-authenticate flows without proper user verification. That said, there finally seems to be a solution.