Passwordless apps: Passkeys in practice
summary
Passkeys are described as a passwordless authentication method using a private cryptographic key; users authenticate via device biometrics or password managers without handling keys directly. The talk explains the WebAuthN W3C specification and demonstrates with live-coding how to add passkey authentication to a Spring application, covering the underlying mechanisms, UX implications, and developer implementation details.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 1:44Password problems
- 3:09Passwordless before passkeys
- 8:47What is a passkey
- 13:59Passkey terms
- 16:25Standards and specs
- 17:29Passkey technical workings
- 22:44Server and client implementation
- 27:20Demo: Spring Security
- 35:35UI customization
- 38:43JavaScript integration
- 43:19Developer resources
- 45:01Conclusion & Q&A
related talks
43mPasskeys in practice: implementing passwordless apps
15mA Password? No Thanks, I Have a Passkey
59mPasswordless Future: Using WebAuthn And Passkeys In Practice
47mPasswordless Web
51mA Passwordless Future! Passkeys for Java Developers
45mPast Time for Passkeys
52mPasswords are Dead, Long live Passkeys!
16mThe end of forgotten passwords - Biometric Authentication