# WebAuthn clone suspected

The KeenAuth APIs return this problem type with HTTP status 401 (Unauthorized).

## Problem type

| Field | Value |
|---|---|
| Type URI | `https://docs.keenauth.com/errors/webauthn_clone_suspected` |
| Code | `webauthn_clone_suspected` |
| HTTP status | 401 Unauthorized |
| Title | WebAuthn clone suspected |

## Meaning

The `signCount` went backwards, so the credential may have been cloned; the authenticator is marked `clone_suspected`.

## Example response

Example response body. `detail` is a human-readable English description that is not meant for end users; `instance` identifies the request.

```json
{
  "type": "https://docs.keenauth.com/errors/webauthn_clone_suspected",
  "title": "WebAuthn clone suspected",
  "status": 401,
  "code": "webauthn_clone_suspected",
  "detail": "...",
  "instance": "urn:idp:request:<request_id>"
}
```

All error codes: [Error reference](/docs/errors).