Passwordless Web
summary
Passwords leak by the billions (ForgeRock cites ~2 billion in 2021, HaveIBeenPwned holds ~13 billion credentials) so this covers a concrete replacement: Passkeys built on WebAuthn/FIDO2 using device TPM/secure enclave and asymmetric keys. Demo registration and login work: phone unlock signs challenges, QR/Bluetooth enables cross‑device login. Practical limits and costs appear — ~200 accounts per person, UB keys store 22 per UB key, one key ≈ $25 and you need backups — spec is long (165 pages) and implementation is nontrivial.
AI-written summary · about
chapters (11)
- 0:00Passwordless security intro
- 1:53Traditional password problems
- 13:48Password leaks and risks
- 20:42Flaws in multi-factor authentication
- 22:50Why passwords are broken
- 23:35Passkeys and WebAuthn intro
- 32:28How passkeys work
- 34:32Live passkey demo
- 39:51Passkeys vs phishing
- 44:30Passkey adoption challenges
- 45:32Summary and future
related talks
47mPasswordless Web
38mJourney to passwordless
59mPasswordless Future: Using WebAuthn And Passkeys In Practice
43mPasswordless: a story of risk, protection and excellent UX
51mA Passwordless Future! Passkeys for Java Developers
47mPasswords are so 1990
30mThe State of Passwordless Auth on the Web
52mA Passwordless Future! Passkeys for Java Developers