One-time iPhone and iPad app

Ceremonylens

Inspect WebAuthn registration and authentication evidence offline, decode flags, RP binding, counters, algorithms, and ceremony assumptions.

Focused field tools

Challenge

Apply challenge checks to the recorded evidence, document assumptions, and retain a concrete verification result before changing a live system.

Origin

Apply origin checks to the recorded evidence, document assumptions, and retain a concrete verification result before changing a live system.

RP ID

Apply rp id checks to the recorded evidence, document assumptions, and retain a concrete verification result before changing a live system.

Client Data

Apply client data checks to the recorded evidence, document assumptions, and retain a concrete verification result before changing a live system.

Authenticator Data

Apply authenticator data checks to the recorded evidence, document assumptions, and retain a concrete verification result before changing a live system.

Flags

Apply flags checks to the recorded evidence, document assumptions, and retain a concrete verification result before changing a live system.

Ceremonylens decodes recorded evidence and does not authenticate a user, validate a live origin, prove attestation trust, or replace relying-party verification. Handle credential artifacts under your security policy and verify with a conforming server implementation.