Immediate Mode Login
Immediate mode asks the browser a single question: do you already hold a credential for this site on this device? If the answer is yes, the account chooser opens right away, before the user types anything. If the answer is no, the request is rejected silently and your normal login form is what the user sees. Nothing flickers, and no empty prompt is ever shown. That silence is the point. Every other login surface has to guess whether a passkey attempt will succeed; immediate mode lets the browser answer, at the cost of being unable to tell you why it said no.Support (July 2026): Chrome 149+ on Android, ChromeOS, Linux, macOS and Windows. Chrome is currently the only browser that implements it, and the API is not yet part of the WebAuthn specification — it is tracked in w3c/webauthn#2291, which is still open. Treat it as a progressive enhancement on top of a login flow that already works without it.
How this differs from the other login flows
Immediate mode and Conditional UI are easy to confuse because both can present a passkey without the user typing a username. The difference is who initiates: Conditional UI waits for the user to focus the input, while immediate mode fires on your call and resolves or rejects at once.
See the flow
Platform screenshots for this page are in production. Until they land, Chrome’s own recordings show the two ways to trigger immediate mode:Sign-in button
The user clicks a dedicated Sign in button and the account chooser opens straight away. When no credential is available nothing is shown, and your normal form stays exactly where it was.
Contextual action
The user clicks something that simply benefits from being signed in — Chrome’s example is Checkout. Returning customers authenticate without a detour; guests continue unchanged.
1
Your app requests an immediate login
- On a user gesture (for example a “Sign in” click), the app calls
navigator.credentials.get()withuiMode: 'immediate'. - Passkey Intelligence decides whether attempting immediate mode is worthwhile for this visitor, so the call is made where it is likely to resolve rather than on every page load.
2
Chrome checks for locally available credentials
- Chrome looks only at credentials it can present without further user action: passkeys held by a passkey provider such as Google Password Manager, Windows Hello or iCloud Keychain, and — when you pass
password: true— passwords saved in Google Password Manager. - Cross-device (QR) and security key options are not offered in this mode.
3
Credential found: the account chooser opens immediately
- The user picks an account and verifies with their screen lock.
- Your server receives a normal assertion and completes the login. Nothing about the flow after this point is specific to immediate mode.
4
No credential found: the request rejects silently
- The promise rejects with
NotAllowedErrorand no UI is ever shown. - Your app renders its standard login form. The user does not see an error, because from their point of view nothing happened.
Implementation
PublicKeyCredential.getClientCapabilities() and check the immediateGet key. uiMode sits alongside publicKey on the request options, not inside it, and accepts "active" (the default), "immediate" or "passive".
Constraints to design around
The call must follow a user gesture
The call must follow a user gesture
Chrome requires a user gesture such as a click to initiate the request, which prevents silent probing on page load. Plan the call for a “Sign in” interaction rather than on first paint.
Incognito and private sessions always reject
Incognito and private sessions always reject
Requests in incognito always throw
NotAllowedError, so your fallback path is the only path for those users.Allowlists are not permitted
Allowlists are not permitted
A non-empty
allowCredentials list causes the request to throw. Immediate mode is inherently a discoverable-credential flow.The dialog cannot be dismissed programmatically
The dialog cannot be dismissed programmatically
The
signal parameter cannot be used to cancel the immediate login dialog once it is shown, so do not build UI that assumes you can withdraw the prompt.Migrating from the origin trial: during the Chrome 139–141 origin trial this feature was requested with
mediation: 'immediate'. A specification change in November 2025 moved it to the uiMode field, and mediation: 'immediate' no longer activates it. Replace it with uiMode: 'immediate' in the same position. See the origin trial announcement for the original shape.