Secure Payment Confirmation - First-Party payment demo

This is a test website. Nothing is charged.

This demo tests the use of a 'pure' (i.e., not payment-enabled) passkey in a first-party scenario. This will not work in a naive browser-cache implementation of SPC, but will work with availability and use of proper OS-level credential store APIs. To test the integration:

As of 2026/09/01, this demo:

• Works on Chrome on Android, as long as the passkey is saved to Google Password Manager.
• Does NOT work on Chrome on MacOS
• Works on Chrome on Windows (154.0.8037.0 or higher), as long as the passkey is saved to Windows Hello and chrome://flags#secure-payment-confirmation-credential-discovery-mode is set to "Enabled Hybrid (OS and Database)"

Instructions:

1. In the iframe, click on 'Enroll Credential'
2. This will trigger passkey creation for the embedded RP
3. Complete the passkey creation; make sure to select the correct authenticator based on the above instructions.
4. Outside of the iframe, click on 'Trigger third-party SPC'. This should fail (show the 'Confirm' screen only), because the passkey isn't enabled for third-party payment
5. Inside of the iframe, click on 'Trigger first-party SPC'. This should succeed (show the 'Verify' screen, which is followed by a successful WebAuthn authentication).

Trigger third-party SPC