The Case Against Passwords: Biometric Authentication for SCA and the Pathway Forward
summary
Pilots in India and the Middle East show payment passkeys replacing OTPs for checkout using Mastercard UI, EMV 3DS integrations or direct network-issued keys, plus tokenization for card number replacement. The system binds a passkey to a device and one or more card credentials so authentication uses local biometrics and a device-bound signature. W3C Secure Payment Confirmation adds cross‑origin invocation and dynamic linking to prevent phishing and improve conversion. Device binding and network‑issued keys speed time to market.
AI-written summary · about
chapters (9)
- 0:00Introduction and welcome
- 1:05Challenges in e-commerce authentication
- 3:12Evolution of card-present security
- 4:13Biometric authentication and pass keys
- 7:49Demo of consumer journey in India
- 10:42Benefits and improvements for ecosystem
- 13:15Secure Payment Confirmation (SPC) standards
- 16:54Q&A session on pass keys and SPC
- 24:04Closing remarks and summary
related talks
16mThe end of forgotten passwords - Biometric Authentication
45mPast Time for Passkeys
25mKeynote Reshaping Digital Payment Authentication
30mAuthentication for humans, why passkeys finally make sense.
27mSecure Authentication without the Need for Passwords
37mAuthentication in 2026: A guide to passkeys, digital credentials and more
45mRedefining Security: From Passwords to Biometrics and Digital Signatures
41mOur future without passwords