No Display? No Problem: Cross-Device Passkey Authentication for XR Devices
Feb 4, 2026Paul Wright, Jimmy Dong, Abhishek Agrawal
Summary
This post details a novel approach to enabling cross-device passkey authentication for devices with inaccessible displays, such as XR devices. It bypasses the use of QR codes by leveraging a companion app and authenticated push channel to transport FIDO URLs, adapting the WebAuthn passkey flow and FIDO's CTAP hybrid protocol. The solution uses in-app notifications and deep linking to initiate the passkey authentication flow on the mobile device, which then establishes a secure channel with the inaccessible device to complete the transaction.
More from the Application Security and Permissions trail
- How We’re Building Scam Alert on WhatsApp With End-to-End Encryption and Verifiability Guarantees
- Privacy-Aware Infrastructure in the AI-Native Era: An Asset Classification Case Study
- Labyrinth 1.1: Making End-to-End Encrypted Backups Even More Reliable
- How Meta Is Strengthening End-to-End Encrypted Backups
- Post-Quantum Cryptography Migration at Meta: Framework, Lessons, and Takeaways