Rolling Out Passwordless
summary
Citibank describes a global rollout that moves 200 million customers across roughly 180 countries off passwords by using FIDO/WebAuthn for device-bound keys, integrating Transmit Security into a legacy IDP rather than rebuilding, and iterating across ~800 applications. The program prioritizes customer-facing flows, ties enrolment to account origination and KYC to remove server-side passwords, plugs auth signals into fraud decisioning for cost savings, and reports successful large-scale adoption with measurable reductions in friction and run-costs.
AI-written summary · about
chapters (13)
- 0:00Introduction to passwordless rollout
- 1:47Why Citibank chose passwordless
- 3:53Top technical challenges faced
- 5:59Strategic planning and business alignment
- 8:08Convincing business stakeholders
- 10:36Customer-first vs employee-first approach
- 13:03Choosing a vendor partner
- 16:35Integrating with legacy IDP
- 20:05Vendor DNA for fraud prevention
- 22:39Passkeys and platform competition
- 24:08Geographic rollout strategy
- 26:15Eliminating passwords entirely
- 28:22Q&A session
related talks
30mWhere we’re going… we won’t need passwords
50mPasswordless BankID with Passkeys and WebAuthn
43mPasswordless: a story of risk, protection and excellent UX
49mGoing Passwordless for Employees: Secure Modern Authentication at Work
07mImagine: A world without passwords, it is easy if you try
20mBeyond Passwords: A Journey to Seamless Authentication for Enterprise Software
25mNavigating the implementation and roll out of passwordless authentication
38mJourney to passwordless