Guarding the Gate: Strategies for High Security with Passkeys
summary
Argues that regulated, high-security services combine sync passkeys with a native device-bound trust anchor (UF/UEFI-style authenticator stored in the TEE) to get phishing-resistant credentials plus the native app UX of no extra click. Describes silent creation of the trust anchor to avoid the double biometric problem, uses step‑up authentication when anomalies or new devices appear, notes SMS OTP is being phased out in the EU, and claims this hybrid approach covers PSD2 article 88 requirements while keeping the common “99%” reauthentication flow seamless.
AI-written summary · about
chapters (10)
- 0:00Introduction and welcome
- 1:10Passkeys in regulated industries
- 6:24Implementation approaches for security
- 8:07Trust anchor and passkey combination
- 11:43User experience considerations
- 13:08Device migration use cases
- 15:58Web application workflows
- 17:00Introducing trust anchor and passkeys
- 19:10Summary and key takeaways
- 20:34Q&A session
related talks
30mAuthentication for humans, why passkeys finally make sense.
17mTrust Anchor in Your Wallet
37mAuthentication in 2026: A guide to passkeys, digital credentials and more
55mYou Shall Not Password: Modern Authentication for Web Apps
52mPasskeys: The Good, the Bad and the Ugly
47mThe Psychology of Multi-Factor Authentication
22mKeynote, Identity & Authentication in ePromiseland
45mRedefining Security: From Passwords to Biometrics and Digital Signatures