> ## Documentation Index
> Fetch the complete documentation index at: https://docs.corbado.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Web Application RPID Configuration

> Learn how to configure and validate RPID settings for web applications, with practical examples and best practices.

<Columns cols={3}>
  <Card href="https://cognito.cloud.corbado-demo.com">
    Try Demo
  </Card>

  <Card href="https://calendly.com/vincent-delitz">
    Talk to Adoption Engineer
  </Card>

  <Card href="https://www.corbado.com/passkeys/enterprise">
    Whitepaper
  </Card>
</Columns>

For web applications, browsers take your application's [origin](https://developer.mozilla.org/en-US/docs/Glossary/Origin) and check if it matches or is a subdomain of the **RPID**. For better understanding the concept of **RPID** validation, let's take a look at the following examples:

| RPID              | Origin            | Status    | Explanation      |
| ----------------- | ----------------- | --------- | ---------------- |
| `example.com`     | app.example.com   | ✓ Valid   | Subdomain        |
| `example.com`     | auth.example.com  | ✓ Valid   | Subdomain        |
| `example.com`     | example.com       | ✓ Valid   | Exact match      |
| `example.com`     | other-example.com | ✗ Invalid | Different domain |
| `example.com`     | example.org       | ✗ Invalid | Different domain |
| `app.example.com` | app.example.com   | ✓ Valid   | Exact match      |
| `app.example.com` | example.com       | ✗ Invalid | Different domain |

When configuring your **RPID** in the [Corbado Management Console](https://app.corbado.com/settings/general?tab=URLs), we recommend using your root domain `example.com`. Only use a subdomain as **RPID** if you specifically need to restrict passkey usage to that subdomain.

<Info>
  Strictly speaking, browsers only use the origin's domain part (e.g. `example.com` from `https://example.com`) to validate the **RPID**. See [WebAuthn specification](https://www.w3.org/TR/webauthn-2/#sctn-rp-id-validation) for more details.
</Info>