Web Authentication Proxy

webAuthenticationProxy

High RiskCategory: CommunicationView Official Docs↗

⚠

Install Warning

"Read and change all your data on all websites."

Technical Context

Allows the extension to intercept Web Authentication API requests, enabling custom handling of security key interactions. This is used for remote desktop or testing scenarios.

What This Means For You

The extension can intercept security key authentication requests. This is highly specialized and used for remote access to security keys.

Related APIs

This permission enables access to these Chrome APIs:

chrome.webAuthenticationProxy

Common Use Cases

✓Remote desktop
✓Security key management

How to Declare in manifest.json

Add the "webAuthenticationProxy" permission to your extension manifest:

{
  "manifest_version": 3,
  "name": "My Extension",
  "permissions": [
    "webAuthenticationProxy"
  ]
}

What Users Will See

When users install your extension, Chrome will display this warning:

⚠

This extension can:

"Read and change all your data on all websites."

Related Permissions

Native Messaging

nativeMessaging

The extension can talk to other programs installed on your computer, not just things in the browser. This is used by password managers and system utilities.

high

Web Navigation

webNavigation

The extension can see when you navigate to different pages and how you got there, like clicking a link or using back/forward. It sees URLs as you browse.

high

Certificate Provider

certificateProvider

The extension can provide digital certificates for secure website authentication. This is used for smart card login or enterprise security.

high

Runtime

runtime

This allows different parts of the extension to communicate with each other. It also enables the extension to respond when Chrome starts or when you click its icon.

low

Identity

identity

The extension can sign into services on your behalf using Google login or other authentication providers. By itself, it cannot see your email address.

low