Forgot Password? Yes I Did!
summary
Passwords are argued to be obsolete, with 2.7 billion breached records and roughly $70 per password-reset support call used as motivation. Alternatives demonstrated within an OAuth flow include a WebAuthn demo using a USB security key and fingerprint (phishing-resistant), a facial-recognition API check, and a magic-link implementation in Node using JWT expiring single-use tokens in about 100 lines that redirects back with a token. Tradeoffs discussed include device loss, risks of storing biometrics, and choosing confidence thresholds for sensitive actions.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:05Password origins and issues
- 4:13Password costs and risks
- 8:08Users as security weak link
- 12:23Modern authentication alternatives
- 18:21WebAuthn for authentication
- 23:03Biometric authentication
- 29:12Magic link alternative
- 34:32Future of passwordless auth
- 37:22Conclusion
related talks
21mGoing Passwordless
32mPasswords are so 1990
17mGoing Beyond Passwords: The Future of User Authentication
30mGoing Beyond Passwords: The Future of User Authentication
47mPasswords are so 1990
30mThe State of Passwordless Auth on the Web
51mThe state of passwordless auth on the web
51mYou Shall Not Password: Modern Authentication for Web Apps