A Passwordless Future! Passkeys for Java Developers
summary
Passkeys replace passwords with FIDO2/WebAuthn cryptographic key pairs, claim to cut the kinds of compromise that cause 65% of breaches, and remove shared-secret storage from servers. Implementation uses the WebAuthn API plus CTAP; Java options shown are webauthn4j and the Yubico java-webauthn-server, integrated into a Spring Boot app with an Okta/IdP flow. Demo registers cross-device passkeys (phone sync and a USB security key with fingerprint) and works end to end.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 1:36Passwords are problematic
- 8:00Passkeys and cryptography
- 11:11FIDO standard
- 13:15Passkey types
- 16:27Registration and auth flows
- 23:29Passkeys advantages
- 27:43Security vs usability
- 28:25Passkey adoption challenges
- 30:11Passkeys for Java
- 31:36Live demo: cross-device auth
- 34:56Building passkey server
- 37:03Resources and closing
related talks
52mA Passwordless Future! Passkeys for Java Developers
51mA Passwordless Future! Passkeys for Java Developers
49mA Passwordless Future! WebAuthn for Java Developers
43mPasskeys in practice: implementing passwordless apps
47mPasswordless Web
41mOur future without passwords
28mPasskeys: Goodbye Passwords, Hello Frictionless Security!
04mDeepu K Sasidharan at JNation 2024