Explore identity on the web and dive deep into advanced authentication systems! Here you'll find resources on how to build robust systems with modern APIs and create user-friendly experiences for signing in, signing up, and signing out. Explore articles, courses, and real-world success stories.

Authentication fundamentals

Learn how to build sign-in and sign-up forms that are secure, accessible and easy to use, with cross-platform browser features like password management and form validation.

Master HTML forms to help you improve your web developer expertise! Our Learn Forms course breaks down HTML forms into easy to understand pieces and guides you through form elements, styling forms, helping users re-entering data, ensuring the form is accessible and secure, testing your forms, and more.

Learn Forms!

Passkeys

Passkeys are an easier and more secure replacement for passwords, enabling users to sign in to their account by unlocking their device screen. Learn more about passkeys and how to implement them in your web app.

Password Manager compatible

Help your users stay safe and secure by integrating with password managers for seamless cross-device sign-in across sites and apps along with automated password updates.
Browsers can help users enter form parameters faster, and avoid re-entering them. This module teaches you how autofill works, and how `autocomplete` and other element attributes can ensure that browsers offer appropriate autofill options.
Learn more
Set up /.well-known/change-password to redirect to your change password page, so the password manager can bring users straight there.
Learn more
For sites (and apps!) that share a single sign-on make use of Digital Asset Links to make sure the password manager knows it's all the same account.
Learn more

Streamline SMS based two-factor authentication user experience

Learn how to implement SMS OTP forms for two-factor authentication efficiently. This article provides cross-browsser best practices for using the WebOTP API and HTML form elements for a seamless user experience.
Learn more
Learn how to improve the user-experience of phone number verification by programmatically getting an OTP from an SMS message.
Learn more
WebOTP helps users enter a phone number verification code in one tap on a mobile website. It's available for desktop as well.
Learn more

Identity federation

Identity federation delegates authentication or authorization of an individual (user or entity) to a trusted external party (an identity provider or IdP).

Case studies

Discover how Yahoo! JAPAN moved from password-based to passwordless authentication.
Read case study
As secure authentication is a big challenge in India, Goibibo used the WebOTP API to reduce sign-in friction on their PWA.
Read case study