Authenticate 2024
as the organisers put it
Authenticate is the industry’s only conference dedicated to all aspects of user authentication – including a focus on FIDO-based sign-ins with passkeys.
| title | author | length |
|---|---|---|
| Seamless and Secure: The rise of payment passkeys | Kevin Crockett | 24m |
Visa is rolling a payment passkey service that acts as the relying party, hosts a FIDO/WebAuthn credential store and exposes three net‑new calls: device… | ||
| Closing Remarks | Andrew Shikiar | 07m |
Conference reports 20% more sessions and about 15% higher on-site attendance, with 150 expert speakers, 60+ sponsors and roughly 120 sessions produced by a… | ||
| Digital Identity Wallets: Future, or Failure? | Andi Hindle, Christine Owen, Teresa wu, Nishant Kaushik, Heather Flanagan | 33m |
Panel argues digital identity wallets are undefined containers for credentials but already use real specs: W3C Verifiable Credentials, ISO mDocs and SD-JWTs… | ||
| Achieving strategic outcomes with FIDO: The phishing-resistant user | Derek Hanson | 24m |
Companies replace passwords with FIDO passkeys and hardware keys, cut credential sprawl by federating identity providers, and see zero account takeovers for 11… | ||
| Recovering Boléro and the Death of Authenticity | Mike Kiser | 24m |
Argues that generative AI distorts the signal of identity the way cochlear implants changed how one man heard Boléro, claiming users become editors or patrons… | ||
| Can we use passkeys to authenticate consumers in online card transactions? | Andrew Shikiar, Sean Estrada, Jonathan Grossar, Henna Kapur | 23m |
Passkeys already run in live pilots — Mastercard payment passkey service in India launched in August — and the panel explains why passkeys alone are… | ||
| Seamless and Secure: The Rise of Payment Passkeys | Kevin Crockett | 24m |
Visa runs a relying‑party passkey service that binds a payment credential to a specific device and browser, supports enrollment post‑purchase or via issuer… | ||
| Secure Payments Confirmation 101 | Doug Fisher | 27m |
Secure Payment Confirmation builds on WebAuthn/FIDO and integrates with 3DS (spec 2311) to present a browser-rendered, biometric/passkey flow that completes… | ||
| The Case Against Passwords: Biometric Authentication for SCA and the Pathway Forward | Jonathan Grossar, Fred Tyler | 25m |
Pilots in India and the Middle East show payment passkeys replacing OTPs for checkout using Mastercard UI, EMV 3DS integrations or direct network-issued keys… | ||
| Private org & govt perspectives in navigating the tech landscape of remote digital identity proofing | Teresa wu, Paul Grassi, Arun Vemury, Bill Fisher | 51m |
Panel summarizes empirical findings and deployment plans: DHS assembles 1,200 fraudulent documents for testing, evaluations show ~10% error rates in current… | ||
| Use of FIDO Authentication Data in 3-D Secure Messages | Henna Kapur | 22m |
Describes a concrete EMV 3-D Secure payload: merchants put a JSON up to 3DS requestor otd (20,000 chars) carrying RP ID, a registration attestation blob… | ||
| Web 3.0 Before It Was Cool: Why Decentralized Authentication is the Future and the Past | Chad Spensky | 23m |
Argues that replacing passwords with hardware-backed private keys and FIDO2/passkeys removes large classes of attacks, cutting credential theft and session… | ||
| Enabling passkeys with "Hybrid" on non-passkey-supported devices | Nobushige Asahi | 22m |
Demonstrates a working proof‑of‑concept that enables passkeys on devices with no biometric or keyboard by implementing a Hybrid Works app on Fire TV that… | ||
| Realizing Passkeys for Enterprise | Christian Wentz | 25m |
Gradient builds an enterprise authentication layer that issues per‑device ephemeral session credentials (default 10 minutes) anchored to the device TPM/Secure… | ||
| Workforce FIDO2 Orchestration Lessons Learned From Millions of Issued Credentials | William Houry | 22m |
Company with 500 customers across 61 countries reports lessons from millions of issued credentials and cites industry figures (33% CAGR to 2026, $53B market by… | ||
| Passkeys: A Breakthrough Step for Workforce Authentication on Shared Computers | Bahram Piri | 26m |
Claims that Passkeys eliminate passwords for shared devices by turning existing employee badges into sync Passkey credentials and using a browser extension… | ||
| Bringing Passkeys into your Passwordless Journey | Tim Larson, Michael Epping | 25m |
Microsoft reports credential attacks rising from ~4,000 to ~7,000 password attacks per second, about 6,000 MFA prompt attacks per day, and 39,000 token… | ||
| Authentication Strategies to Protect Your Customers and Your Brand from Sophisticated Attacks | Carlos Sanchez | 30m |
Claims that SMS OTP is still the dominant MFA with 35% of businesses use SMS OTP and that massive data exposure — 25 billion records exposed Aug 17 2024 —… | ||
| Prevent Catastrophe When Authentication Goes Wrong | Atul Tulshibagwale | 23m |
Claims that live sessions can be revoked and access adjusted in real time using a reliable async stream of JWT security events called CAPE and the Shared… | ||
| Reusable Identity for Improved Passkey Compliance | Abbie Barbir, Rolf Lindemann | 27m |
Reusable identity pairs passkeys with a reusable, standards-based identity layer so relying parties get assured KYC without repeated selfie + ID checks… | ||
| Lessons From a Financial Services Passkey Deployment | Arkadiy Goykhberg, Nick Aralin | 28m |
Branch Insurance replaces SMS TFA with passkeys using Descope on top of Cognito, keeps Cognito as a cheap fallback, and stages migration in 11 migration waves… | ||
| No browser, no password, no problem | Jonas Iggbom | 21m |
Claims a mobile app can do OAuth/OpenID without a browser by using a hypermedia API backed by the authorization server, and combine that with WebAuthn passkeys… | ||
| Read Out from the AuthEN Interop Event | David Brossard, Atul Tulshibagwale, Alex Olivier, Omri Gazitt | 23m |
A working OZen interop shows a standard PEP-PDP API (v1.0 with a 1.1 preview) that supports OPA-based and other PDPs and already has 12–14 implementations… | ||
| The Power of Combining Identity Wallets and Passkeys | Christine Owen | 25m |
Combining W3C verifiable credentials (ISO/MDL-style identity wallets) with passkeys as AAL2 means enrolling once via document + selfie proofing, storing claims… | ||
| Stop Counting Factors... Start Describing Authentication Events | Dean Saxe, Pamela Dingle | 32m |
Argues that counting “factors” is misleading and proposes describing authentication as events using seven credential-management properties (boundary, recovery… | ||
| Unshackling Passkeys: Digital Strategies for Strong Identity Binding | Bill Fish | 25m |
Argues that strong identity binding uses the mobile as a cryptographic anchor and reduces friction for high‑value cases (finance, healthcare). Proves… | ||
| Passwordless zero-knowledge services | Rew Islam | 28m |
Claim: password managers can ditch master passwords by combining a low-entropy PIN with device possession and server-assisted cryptography so the client… | ||
| Beyond Passwords: A Journey to Seamless Authentication for Enterprise Software | Sarah Zou | 20m |
DocuSign deploys passkeys into its login flow and packages them as Passkey-as-a-service to unlock an ID wallet in Europe, meeting 2FA rules and replacing slow… | ||
| Navigating the implementation and roll out of passwordless authentication | Mikel Grabocka | 25m |
SMG implements FIDO passwordless tied to device posture and a risk-based policy that combines resource classification, user role and device managed status… | ||
| Balancing enhanced security with excellent user experience in the enterprise | Ludwig Ward, Ryan Rowcliffe | 23m |
Claims that moving from passwords to passkeys and biometric security keys cuts support calls (about 70% are password resets), saves ~11 hours per user per year… | ||
| Deployment Case Study: Tailoring Passkey Journeys for Different Users | Meir Wahnon | 25m |
Case studies show concrete outcomes and engineering choices: Branch Insurance implements passkeys with a device-support check, tracks errors to Segment, and… | ||
| Navigating Passkey Adoption Challenges - Mercari's Journey to Effectively Mitigate Phishing Risks | Tatsuya Karino, Kotaro Oi | 25m |
Mercari reports concrete results from a two year passkey rollout: backend changes cut SMS costs and reduce phishing exposure, with an early win of 30% SMS cost… | ||
| What I wish I knew about passkeys content design before I started this adventure | Elizabeth Beasley | 28m |
18 months of work yields concrete lessons: a 20‑company audit in a giant Figma shows only about 3 of 10 implement passkeys at account creation, so plan phased… | ||
| How Login.gov implemented passkeys as an MFA method to make federal services easier and more secure | Allison Rosenberg | 25m |
Login.gov adds passkeys as a second-factor option (launched early 2022) across services for ~100M users, 50 agencies and 500 apps, offering six MFA choices and… | ||
| Solving the Final Roadblock to Passkeys: a Fractured Development Environment | Reed McGinley-Stempel | 25m |
Claim: passkeys would stop phishing and scale with AI threats but adoption stalls because integration is a fractured full‑stack problem. Evidence: phishing… | ||
| Privacy Considerations for FIDO and Beyond | Jamie Danker | 20m |
FIDO has five articulated privacy principles and the guidance stresses biometric data never leaves device, disassociability and data minimization as concrete… | ||
| The State of Michigan's Passkey Experience | Nathan Ebig | 25m |
State of Michigan implements passkeys (passwordless) across the MyLogin identity platform: 360 integrated apps (32 public), 13.3 million public users, built by… | ||
| A Shared Services Model to Promote Rapid Adoption of FIDO2 Within Federal Government | Sarbari Gupta | 27m |
Proposes a concrete architecture that binds derived FIDO2 credentials to existing PIV accounts using a federal trust broker that aggregates agency PIV account… | ||
| Considerations of Leveraging Entra ID Across All Enterprise Applications | Rick Killpack | 19m |
OpenText describes using Entra ID and Windows Hello for Business to issue and manage device-tied passkeys, tying biometric or phone-based secrets into… | ||
| FIDO biometrics and passkeys for in-vehicle apps | Nimish Shrivastava | 26m |
Qualcomm describes a connected services platform that ties FIDO/passkeys, on-device biometrics (partnered with Deon) and a vehicle-stored ID token to… | ||
| Passkey Authentication for IBM Employees | Shane Weeden | 25m |
IBM deploys passkeys for employees by moving apps onto IBM Security Verify SaaS and adding a self‑service onboarding portal that shrinks app onboarding from… | ||
| The [pass] keys to success of FIDO2 Enterprise Adoption | Sydney Ng | 20m |
TikTok documents a phased FIDO2 enterprise rollout that starts with QR-coded serialized keys distributed to employees and a self-registration app that… | ||
| Enterprise passkey deployment updates and learnings from passkey managers | Wang Kang, Xiao Qian | 20m |
Enterprise passkey rollout starts from 2019 and goes public July 2022, now with over 19,000 registered users, ~30% active and 50,000 requests/week, saving… | ||
| Building Blocks of Security: Using passkeys to protect user access | Carly Score, Jacob Rickerd | 26m |
Attentive describes replacing passwords with passkeys via Okta policies, enforcing device-bound authentication at the application layer and rolling out three… | ||
| Passkeys deployment at scale - our journey and best practices | Mahender Madhavan, Marry Pivazian | 22m |
eBay reports 14% adoption with 25 million users enrolled and a 93% sign-in success rate after rolling out passkeys across platforms, using a phased UX-led… | ||
| One Year on with Passkeys: Air New Zealand's Insights and Learnings from a Global Rollout | Anthony Kemp, Justin Soong | 25m |
Air New Zealand rolls out passkeys to customers (May 2023) and goes completely passwordless (Dec 2023), reporting tangible wins: 67% opt‑in on uplift screens… | ||
| Detecting Compromise of Synced Passkeys | Coby Wang | 22m |
Proposes a deception layer that registers extra decoy verification key entries alongside the real passkey so attacker guesses can trigger alerts; prototype and… | ||
| Lessons from Kenvue's Passwordless Rollout Across 40K Users | Amandeep Nagra | 26m |
Kenvue migrates ~45,000 users off passwords by unifying three IdPs (PingFederate, Entra ID, Ping One) and supporting Windows Hello for Business, a mobile… | ||
| How CISA is approaching authentication and cloud security in the era of great power competition? | Grant Dasher | 26m |
Argues for a safety‑engineering approach to identity and cloud security, saying measured defect rates drive targeted fixes; recommends phishing‑resistant… | ||
| Borderline: Examining the edge cases of FIDO | Karen Larson | 23m |
FIDO breaks in three stubborn places: constrained IoT and OT where devices use MQTT hub and spoke networks, lack federation, limited UIs and sometimes require… | ||
| Bringing FIDO passwordless innovation into regulated financial industry | Tina Srivastava, Bill Wright | 27m |
Badge claims a 20‑patent method that derives ephemeral keys from biometrics, PINs or device signals so no biometrics, private keys, or hashed credentials are… | ||
| Passkeys for Financial Institutions: Why & How | Pedro Martinez | 26m |
Financial institutions get ready to deploy FIDO passkeys as a practical password replacement: implement a FIDO authentication server and optionally add an SDK… | ||
| Removing the burden and risk of passkey registration by pre-registering the credential | Joe Scalone, Manu Malhotra | 27m |
Yubico FIDO pre-reg pre-registers FIDO credentials at the factory and ships keys pre-enrolled to Okta accounts with a separately delivered PIN, integrating via… | ||
| From Consumer Convenience to Enterprise Security: Demystifying Passkeys in the Workforce | Allen Storey | 27m |
Enterprises move from passwords and OTP toward deployable, phishing‑resistant passkeys integrated with existing PKI and identity stacks: examples include a US… | ||
| FIDO Automotive applications | David Turner | 25m |
FIDO brings a zero touch onboarding protocol (FDO) that auto-provisions devices from microcontrollers to servers, supports any transport, and uses late binding… | ||
| Panel: America Loves FIDO | Jeremy Grant, Karen Staley, Grant Dasher, Andrew Regenscheid | 45m |
US government agencies are actively moving from passwords and SMS OTP toward FIDO passkeys — login.gov already accepts passkeys and NIST issues an immediate… | ||
| FIDO standards for automotive use cases | Richard Kerslake, Nimish Shrivastava, Vamsi Putrevu, Conor White | 48m |
Panel argues FIDO-aligned, on-device biometrics (face, voice, iris) power in-car identity while avoiding cloud latency; Qualcomm platforms and delegated SCA… | ||
| Future-Proofing Authentication: From Biometric Logins to Passkeys with WebAuthn | Nimit Shah | 13m |
Chime implements device biometrics over WebAuthn, generating a device key pair, signing server challenges (attestation and assertion flows), and storing the… | ||
| Improving authentication policy enforcement for government resources | Tom Clancy | 26m |
Government policy moves away from PKI‑only authentication toward a tailored mix of AAL and FAL choices, insisting on phishing‑resistant methods and semantic… | ||
| Growing Our Community with the Digital Identity Advancement Foundation | Arynn Crow | 11m |
Digital Identity Advancement Foundation runs merit and need-based programs to remove financial barriers, awarding Kim Cameron award and Victorio Vachi award… | ||
| Simplify enterprise adoption of passkeys: Best practices for implementation | Gregory Vigroux | 23m |
Enterprise adoption focuses on deployment details: browsers and phones already support passkeys widely — 96% browser, 98% mobile support — and almost all major… | ||
| Understanding Passkey UserVerification and its Impact on Authentication Experiences in your Products | Jeff Corrigan | 19m |
Explains that WebAuthn’s UV flag signals UV flag values: required/preferred/discouraged to authenticators and that biometric data never becomes part of the… | ||
| Fireside Chat: A discussion about draft NIST 800-63-4 and all things digital identity | Zachary Martin, Andrew Regenscheid | 26m |
Draft NIST 800-63-4 collects over 2,000 recent comments on top of ~4,000 earlier ones and keeps a controversial 8-character minimum for passwords while adding… | ||
| Guarding the Gate: Strategies for High Security with Passkeys | Rolf Lindemann | 22m |
Argues that regulated, high-security services combine sync passkeys with a native device-bound trust anchor (UF/UEFI-style authenticator stored in the TEE) to… | ||
| Introducing Passkey Central | Megan Shamas, Alex Rupprecht | 25m |
A new site called Passkey Central launches as a focused enablement hub built from research: 37 RPs interviewed, resulting in 48 hours of interview video and a… | ||
| Perspectives | Chris Schnieper, Jeremy Grant | 26m |
Overview of concrete work: Federal Reserve Financial Services describes the Payments Improvement group, publishes a scams classifier and a synthetic identity… | ||
| Securing the Enterprise: How to use passkeys/WebAuthn to become phishing resistant today | Johannes Stockman | 24m |
Enterprise adoption of passkeys shows concrete traction: 800 million Google users and 175 million Amazon users in the wild, passkey factor validations grow… | ||
| Passwordless Authentication in the Regulatory MFA Landscape | Tola Dalton | 23m |
Regulatory MFA is tightening: PSD2 disqualifies typical device biometrics as an inherence factor because device biometric control rests with manufacturers… | ||
| Do Passkeys Solve the Account Recovery Problem? | Kelley Robinson | 25m |
Passkeys improve login but do not eliminate account recovery: synced passkeys reduce device loss risk yet users still lose access and cross‑device sync fails… | ||
| Surge in Passkey Adoption: Strategies and Successes | Abhinav Mehta | 19m |
Amazon reports 175 million passkey customers after a global roll‑out that uses split experiments and targeted nudges. Enrollment treatments (direct modal… | ||
| Step-by-step procedure and considerations for passkey deployment | Keiko Itakura | 23m |
Covers planning, implementation and operation steps for passkey rollout with concrete tradeoffs: measure ROI by reduced call‑center password resets and lower… | ||
| Game On: The Journey of Passkey Launch | Cam Champeau | 18m |
PlayStation replaces passwords at launch across console, web and apps, unifies sign-in domains, uses mobile as the cross-device connector and ships an in-app… | ||
| Passkeys for Google accounts: learnings and our shared path forward | John Gronberg | 15m |
Google reports rollout milestones: 500M sign-ins by end of 2023, then ~1B sign-ins and 400M accounts after a year, now 2.5B sign-ins and 800M accounts; added… | ||
| Innovation in Authentication and More | Matthew Miller, Chris Anderson | 16m |
Claim: 80% of breaches involve identity, driven by siloed logs, unmanaged devices and exfiltrated session cookies. Practical fixes: adopt passkeys… | ||
| It's Time to Play the Feud! | Jim MacDonald, Jeff Steadman | 22m |
A live game show runs on audience survey data with buzzing teams answering what attendees actually said about identity topics, not opinion fluff. Top concrete… | ||
| We Love Passkeys - But How Can We Convince a Billion Users? | Scott Bingham, Sangeeta Ranjit | 23m |
Microsoft rolls out consumer passkey support with concrete results: 1 in 4 click-through on proactive enrollment nudges, 99% completion rate for those who… | ||
| Accelerating the Journey Towards Passkey Utopia | Andrew Shikiar | 27m |
Accelerating the Journey Towards Passkey Utopia
Andrew Shikiar, Exec Director and CEO, FIDO Alliance | ||
| The Two Simple Rules for Creating Passwordless Authentication for Consumers | Mike Slaugh | 16m |
Claim: passkeys are the most viable path to real consumer passwordless authentication and the rollout must follow two concrete rules: don't be a jerk — use… | ||
| AuthEN: Standards for modern authorization | David Brossard, Atul Tulshibagwale, Alexandre Babeanu, Omi Gazitt | 55m |
OZen defines a simple PEP→PDP JSON: a request with subject action resource plus optional context and a response that is true or false, and it already has… | ||
| Complementing Passkeys with Strong Identity Assurance for High-Risk Actions and Account Recovery | Fabian Eberle | 22m |
A cloudless biometric system transforms a selfie into an opaque cryptographic artifact so no biometric templates ever reside on server or device, using… | ||
| A FIDO web wallet for digital identity | Niels Flensted-Jensen | 25m |
Claims a browser-only web wallet built on WebAuthn that accepts a credential issued via Danish eID issuance, lets users do selective disclosure and present… | ||
| Harnessing Passkeys in the Battle Against Al-Powered Cyber Threats | Ryan Rowcliffe | 27m |
Claim: passkeys block the primary AI-scaled attack vector where adversaries use LLMs plus automation to turn OSINT into realistic spearphish. The demo shows an… | ||
| Expanding beyond authentication with emerging authorization standards | David Brossard | 24m |
Argues that externalized, runtime authorization (not just OAuth tokens) is required for fine‑grained, contextual decisions: a PEP talks to a PDP using… | ||
| Passkeys on Windows: New Platform Features | Bob Gilbert | 25m |
Windows adds a native passkey extension: third‑party providers register as COM objects packaged as apps and receive CBOR WebAuthn requests, so Bitwarden and… | ||
| Passkeys on Google platforms: updates on latest features and real-world successes | Diego Zavala, Chirag Desai | 27m |
Google reports more than 400 million passkeys saved in Google Password Manager and 1,000+ Android apps integrated, with partners citing concrete wins: Kayak… | ||
| The 2F's of passwordless journey | Lovlesh Chhabra, Sarit Arora | 26m |
A team describes building Yahoo Account Key: moves from one‑time codes (March 2015) to a push‑prompt system (Oct 2015), rearchitecting user records and APIs to… | ||
| Passkeys on Windows: Paving the Way to a Frictionless Future! | Sushma K, Ritesh Kumar | 27m |
Windows introduces a one-time QR setup that saves an encryption key to a phone or security key and then syncs passkeys across Windows devices early 2025; 99%… | ||
| CSV is dead, long live credential exchange | Nick Steele, Rene Leveille | 21m |
A new credential exchange standard defines a portable JSON format for full vaults (accounts, collections, items, passkeys, cards, SSH keys) plus a protocol… | ||
| Mobile UX Best Practices for Passkeys | Yunji Ha | 26m |
Android outlines concrete mobile UX decisions for Passkeys: use the Credential Manager API to consolidate options and let the platform surface the safest… | ||
| Building a cost-benefit analysis for passwordless solutions | Rohit Nayak | 23m |
Forrester’s 80 hours/year per employee password-reset claim becomes concrete with the IEEE calculator and a spreadsheet template that turns unit costs into… | ||
| How to win the four boss battles of your passkey product development quest | Tina Zhuo | 27m |
Dashlane decides in 2022 to build passkey support early, accepts short-term revenue tradeoffs, and ships a desktop-first solution that works: engineers… | ||
| Japan is an Innovation Hub for FIDO Adoption since 2014 and looking at the Future | Koichi Moriyama | 27m |
Japan leads FIDO adoption since 2014, engineering an early platform-to-service path: May 27, 2015 world‑first ecosystem deployment with carrier requirements… | ||
| Four Components of Modern Identity | Ian Glazer | 23m |
Framework names four concrete components: policy, orchestration, execution, data. Policy includes machine-readable rules plus visualization and translation so… | ||
| Navigating the Identity Security Road with Confidence | Andrew Cameron | 23m |
Navigating the Identity Security Road with Confidence
Andrew Cameron, Technical Fellow, General Motors | ||
| IAM Stacks Under Attack! WhyAuthentication is Key to Cyber-Resiliency | David Mahdi, Miguel Navarro | 25m |
IBM finds 300 days to detect an identity breach and demonstrations show attackers using phish kits that plug into Telegram + OTP bots to capture credentials… | ||
| CTAP 2.1: FIDO's new tricks for passkeys on security keys | Will Smart | 25m |
CTAP 2.1 (published summer 2022) adds concrete controls to physical security keys: Enterprise attestation reveals a key serial number only at registration… | ||
| Interactive Session: Bridging the gap between the tech and the user | Mitchell Galavan, Court Morgan | 01h 26m |
Google reports 1 billion uses across 400 million accounts of passkeys and product tests show 50% faster sign-ins for some sites, with passkey syncing across… | ||
| Al-Generated Attacks: The New Era of Threats to Authentication | Anthony Lam | 27m |
Generative deepfakes scale attacks with off‑the‑shelf tools: DeepFaceLive + virtual cam or DroidCam produce face swaps, motion reenactments and GAN outputs… | ||
| Ensuring biometric recognition is secure and works well for all: A Case Study | Greg Cannon, Paul Heim, Ajay Amlani, Chris Allgrove | 27m |
FIDO launches a remote IDV face certification launched June that measures matching against document photos and on-camera screen-light liveness checks, and adds… | ||
| Peeling Back the Passkeys Onion | Tim Cappalli | 26m |
Explains how passkeys actually work across four players — relying party, browser, OS and authenticator — and which signals change UX: allowCredentials lists… | ||
| Exploring Trends in Passkey Adoption | Megan Shamas, Sarah Lefavrais, Michael Thelander, Sean Dyon | 54m |
Survey finds 87% of organizations are piloting or deployed passkeys, with many starting device-bound first and then expanding; a manufacturing rollout moves… | ||
| Shift into high gear: Answering common questions to help you get off the starting line | Karen Larson, Matthew Miller | 22m |
Explains the concrete difference: WebAuthn is the browser API and passkeys are an opinionated, discoverable-credential use of WebAuthn; shows real registration… | ||
| Passkeys 101: Technical Principles of FIDO | David Turner | 56m |
Explains how FIDO uses an authenticator to create device-bound key pairs so the private key never leaves the user agent and relying party domain checks block… | ||
| Identity Verification Compliance Around the World | Chris Cortes | 27m |
Companies face $7 billion in fines from 2023 IDV/AML lapses and must choose between entering compliant, non-compliant, or not at all. Regulations vary: eIDAS… | ||
| ROI 101: Business Justification | Jeff Hickman | 32m |
Passkeys cut password helpdesk volume dramatically — an example model for an 8,000-employee org shows 70% reduction in password resets translating to about… | ||
| How do I..? Answering common questions from RP devs | Matthew Miller | 25m |
Explains three concrete new WebAuthn signal APIs — signal unknown credential, signal all accepted credentials, signal current user details — described as… | ||
| nothing matches | ||