skills.rest
1Shot-API
1Shot-APIOFFICIAL
Explore all skills by this author →
Website𝕏@1shotapiGitHub

webauthn-prf-wallet

Builds passkey-derived Ethereum wallets with iframe RPC isolation for EVM applications.

1|Updated Jan 23, 2026
Search Tags:#ethereum#webauthn#evm#wallet security#passkey wallet#prf#iframe isolation
One-click install
npx skills add https://github.com/1Shot-API/skills --skill webauthn-prf-wallet
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: webauthn-prf-wallet
Source: https://github.com/1Shot-API/skills/tree/main/webauthn-prf-wallet/webauthn-prf-wallet
Command: npx skills add https://github.com/1Shot-API/skills --skill webauthn-prf-wallet

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and assets (resource) components.

What problem does it solve?

This Skill helps developers build non-custodial Ethereum wallets without seed phrases by deriving wallet keys from passkeys while reducing exposure from XSS and application-layer compromise.

Core Features & Use Cases

  • Passkey Wallet Derivation: Implements WebAuthn PRF-based key derivation with HKDF and secp256k1 wallet creation for EVM applications.
  • Secure Key Isolation: Provides an iframe-based wallet architecture with RPC communication so private keys remain isolated from the parent application context.
  • Compatibility and Recovery Patterns: Covers PRF platform detection, LongBlob fallbacks, encrypted recovery flows, and server-side WebAuthn verification for production wallet experiences.

Quick Start

Ask the skill to add a passkey-derived Ethereum wallet to a web application with iframe isolation and WebAuthn authentication.

Frequently Asked Questions about webauthn-prf-wallet

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create an Ethereum wallet using WebAuthn passkeys without seed phrases?▼

You can create a non-custodial Ethereum wallet by deriving secp256k1 keys from WebAuthn PRF outputs using HKDF. This passkey wallet approach eliminates seed phrases by leveraging browser-native authentication for key generation.

How does iframe isolation protect private keys in a web application?▼

Iframe isolation secures private keys by executing cryptographic signing within a sandboxed iframe context. The parent application communicates through RPC calls, preventing XSS vulnerabilities and application-layer compromises from exposing wallet keys.

Does WebAuthn PRF work with all browsers for EVM wallet derivation?▼

WebAuthn PRF browser compatibility varies, requiring platform detection checks before wallet derivation. Implement LongBlob fallbacks and encrypted recovery flows to support environments where PRF is unavailable for EVM wallet creation.

What is the best way to isolate EVM signing from application code?▼

The best way to isolate EVM signing is implementing an iframe-based wallet architecture with RPC communication. This separates private key handling from application code, mitigating XSS exposure while maintaining full signing functionality.

How do I implement recovery flows for a passkey-derived Ethereum wallet?▼

Implement passkey wallet recovery using encrypted recovery flows and server-side WebAuthn verification. These patterns ensure users can restore access to non-custodial Ethereum wallets when original passkey credentials are lost or unavailable.

Can I use WebAuthn authentication for EVM transaction signing?▼

Yes, WebAuthn authentication supports EVM transaction signing by deriving secp256k1 wallet keys from PRF outputs. Signing operations execute within an isolated iframe context, keeping private keys secure during all application interactions.

Related Skills

Explore More Software Engineering Skills→
GoogleChromeGoogleChrome
926

passkeys-web

Implements WebAuthn/FIDO2 passkey authentication workflows for web applications.

Official
Advanced
okxokx
12

uniswap-viem-integration

Configure viem clients and wagmi wallet connections for EVM blockchains in TypeScript.

Official
Intermediate
vultisigvultisig

vultisig-sdk

Create MPC wallets, derive addresses, sign transactions, and swap across 36+ chains via TypeScript SDK.

Official
Intermediate
dnzengoudnzengou

zyfai

Create a non-custodial subaccount and automate yield optimization for Ethereum wallets.

Community
Advanced