Tips for Painless Passwordless
summary
Practical, code-level guidance: specify authenticatorAttachment (values platform or cross-platform) when calling navigator.credentials.create to steer registration; capture and store getTransports during registration and pass those transports back in allowCredentials to avoid confusing browser modals; use userAgent/userAgentData to disable impossible combos (e.g., Firefox on macOS currently lacks platform/PIN support); expect passkeys, hybrid authenticators, backupStatus and device public key flags to change flows; adopt battle‑tested libraries (SimpleWebAuthn, PyWebAuthn, webauthn.io) and consult passkeys.dev for current patterns.
AI-written summary · about
chapters (9)
- 0:00Introduction and setup
- 1:04About the presenter
- 3:30Why WebAuthn feels complex
- 4:13Tip 1: Streamline registration
- 6:58Tip 2: Optimize authentication
- 10:08Tip 3: Detect unsupported cases
- 12:13Passkeys and new challenges
- 13:39Staying updated on WebAuthn
- 15:45Q&A session
