@whitequark you're right, I forgot about that although I have never once seen any information on how to actually implement webauthn in software so unless the keepassx team just figured it out from the specification (which tbf I can't into reading RFCs so maybe that's what they did) I have only ever seen it done by emulating the authenticator hardware lmao. but I'll have to look at their code I suppose and see what they did