The Two Simple Rules for Creating Passwordless Authentication for Consumers
summary
Claim: passkeys are the most viable path to real consumer passwordless authentication and the rollout must follow two concrete rules: don't be a jerk — use published FIDO Alliance design patterns and PasskeyCentral.org, implement cross‑device sign‑in and autofill (autofill shows a 96% success rate), and make adding passkeys frictionless; don't be stupid — plan to remove passwords (not treat passkeys as mere options), choose device‑bound vs synced based on risk, and map passkey strength to transaction sensitivity.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 1:53Password game and complexity
- 3:36Passwords are outdated
- 6:46Two simple rules for passwordless
- 9:16Rule one: Don’t be a jerk
- 11:00Rule two: Don’t be stupid
- 15:35Conclusion and call to action
related talks
28mPasskeys: Goodbye Passwords, Hello Frictionless Security!
52mPasskeys: The Good, the Bad and the Ugly
42mIntroducing Passkeys for Multiple Use Cases and UX Challenges
47mPasswordless Web
30mAuthentication for humans, why passkeys finally make sense.
37mAuthentication in 2026: A guide to passkeys, digital credentials and more
51mA Passwordless Future! Passkeys for Java Developers
38mJourney to passwordless