Passkey registration breaks after moving off localhost..

📰 Reddit r/cybersecurity

Fix passkey registration issues after moving from localhost to a real domain by addressing TLS certificate errors

intermediate Published 3 Jun 2026

Action Steps

Run openssl to generate a new certificate with the correct subjectAltName
Configure the web server to use the new certificate
Test navigator.credentials.create() to ensure passkey registration works
Verify the TLS certificate configuration using tools like SSL Labs
Apply a trusted certificate or configure the client to trust the self-signed certificate

Who Needs to Know This

Developers and cybersecurity teams working on web authentication systems will benefit from understanding how to resolve TLS certificate errors to enable passkey registration

Key Insight

💡 Self-signed certificates can cause passkey registration to fail due to TLS certificate errors

Key Takeaways

Fix passkey registration issues after moving from localhost to a real domain by addressing TLS certificate errors

Full Article

Was prototyping passkeys with @ simplewebauthn and everything worked on localhost. Moved the app to a real domain on the same port ( https://testsite.com:3000 , added it to my hosts file), and now navigator.credentials.create() throws: NotAllowedError: WebAuthn is not supported on sites with TLS certificate errors. The cert is self-signed (openssl, subjectAltName=DNS:testsite.com , serverAuth,

Read full article → ← Back to Reads