Bringing Passkeys into your Passwordless Journey
summary
Microsoft reports credential attacks rising from ~4,000 to ~7,000 password attacks per second, about 6,000 MFA prompt attacks per day, and 39,000 token thefts/day and shifts strategy from user-by-user key distribution to a platform+user rollout. Built features include device-bound passkeys in Microsoft Authenticator, macOS platform credentials and Windows Hello, FIDO2 provisioning via Microsoft Graph, passkey profiles and registration campaigns; creating passkeys on users’ behalf simplifies web registration and accelerates adoption toward companywide phishing‑resistant login by 2025.
AI-written summary · about
chapters (13)
- 0:00Introduction and agenda
- 0:51Current identity attack trends
- 2:07Phishing-resistant options
- 3:06Lessons from internal adoption
- 3:39Refined deployment strategy
- 6:51Registration and usability
- 10:11Onboarding and recovery needs
- 12:03Deployment best practices
- 14:14Enforcing credential usage
- 20:24Key takeaways
- 21:42Future innovations
- 22:23Closing and next steps
- 23:33Audience Q&A
related talks
52mPasskeys: The Good, the Bad and the Ugly
25mConsumer Passwordless at Scale
15mOur future without passwords
30mAuthentication for humans, why passkeys finally make sense.
47mPasswordless Web
38mPasswordless App with Passkey
49mGoing Passwordless for Employees: Secure Modern Authentication at Work
01h 00mFeatured Keynote