# NitroKey 3: WebAuthn with PRF extension

**URL:** https://support.nitrokey.com/t/nitrokey-3-webauthn-with-prf-extension/7324
**Category:** FIDO2 / Nitrokey 3
**Created:** [November 2, 2025, 10:27am UTC](https://support.nitrokey.com/t/nitrokey-3-webauthn-with-prf-extension/7324 "2025-11-02T10:27:38Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![FloHo](https://support.nitrokey.com/letter_avatar_proxy/v4/letter/f/f9ae1b/32.png) [@FloHo](https://support.nitrokey.com/u/FloHo)
#### Post date: [November 2, 2025, 10:27am UTC](https://support.nitrokey.com/t/nitrokey-3-webauthn-with-prf-extension/7324/1 "2025-11-02T10:27:38Z")

</div>

Hello,

I am building a web application that uses WebAuthn with PRF extension. Unfortunately Chrome only returns

```auto
{ prf: { enabled: true } }

```

without a result, when selecting the NitroKey 3 as authenticator.

I am passing options like this - of course some portions are converted to ArrayBuffer before passing it in:

```auto
{
        "challenge": "My00UOyTpB6eS8vsSHWmi1djw2Ct3fi2SGajEkGbLXA",
        "rp": {
            "name": "Test Auth - localhost",
            "id": "localhost"
        },
        "user": {
            "id": "_RVVnKP7PRvXuspkKMOzFC6k5-aNaBD2nFJhHwprLcw",
            "name": "testuser",
            "displayName": ""
        },
        "pubKeyCredParams": [
            {
                "alg": -8,
                "type": "public-key"
            },
            {
                "alg": -7,
                "type": "public-key"
            },
            {
                "alg": -257,
                "type": "public-key"
            }
        ],
        "timeout": 60000,
        "attestation": "none",
        "excludeCredentials": [],
        "authenticatorSelection": {
            "residentKey": "preferred",
            "userVerification": "preferred",
            "requireResidentKey": false
        },
        "extensions": {
            "prf": {
                "eval": {
                    "first": "lsAc73comXE="
                }
            }
        },
        "hints": []
    }

```

The NitroKey Firmware Version is **v1.8.1** according to nitropy.

Does the NItroKey 3 actually support WebAuthn PRF extension? Am I doing something wrong?

Thanks in advance!

Kind regards,

Florian

---

<div class="post-metadata">

### Author: ![klw](https://support.nitrokey.com/letter_avatar_proxy/v4/letter/k/47e85d/32.png) [@klw](https://support.nitrokey.com/u/klw)
#### Post date: [January 19, 2026, 3:42pm UTC](https://support.nitrokey.com/t/nitrokey-3-webauthn-with-prf-extension/7324/2 "2026-01-19T15:42:58Z")

</div>

I can confirm this issue on **v1.8.2**.

Also an update to 1.8.3 is not working on macOS using the latest nitrokey app.