Get Secure Payment Confirmation Capabilities

at a glance

why it exists

Secure Payment Confirmation (SPC) lets merchants authenticate users via WebAuthn during a payment flow. SPC supports advanced features like browser-bound keys (hardware-backed credentials tied to the device). Before Chrome 148, there was no way for a site to programmatically check whether the browser and OS combination supported a particular SPC capability — a merchant might attempt to use browser-bound keys on a platform that doesn't support them and receive an opaque error. getSecurePaymentConfirmationCapabilities() provides a capability-detection step so merchants can branch their payment flow appropriately.

shape of the API

Method signature

// Static method — no PaymentRequest instance needed
const caps = await PaymentRequest.getSecurePaymentConfirmationCapabilities();

The method returns a Promise resolving to a plain object whose keys are capability identifiers and whose values are Booleans. A value of true means the capability is currently supported; false means it is not.

Checking browser-bound key support

const caps = await PaymentRequest.getSecurePaymentConfirmationCapabilities();

if (caps.browserBoundKeys) {
  // Browser supports hardware-backed browser-bound keys in SPC
  // → proceed with a flow that requests browserBoundKeys
  initiateSecurePaymentWithBoundKeys();
} else {
  // Fall back to standard SPC or a non-SPC payment flow
  initiateStandardPayment();
}

Platform availability

The method is only available on platforms that support Secure Payment Confirmation: Android, macOS, and Windows. On other platforms (Linux, ChromeOS), the method is not present. Feature-detect before calling:

if ('getSecurePaymentConfirmationCapabilities' in PaymentRequest) {
  const caps = await PaymentRequest.getSecurePaymentConfirmationCapabilities();
  // use caps
}

browser support

see also

• W3C Secure Payment Confirmation specification
• MDN: Using Secure Payment Confirmation
• chromestatus — Get Secure Payment Confirmation Capabilities (4727235745546240)