Passwordless Future: Using WebAuthn And Passkeys In Practice
summary
Explains concrete claims and demos: WebAuthn produces a public/private keypair via the browser, a live USB security key demo shows registration and passwordless login succeeding, and major vendors roll out passkeys that sync credentials (Apple/Google claim end‑to‑end encryption) and add cross‑device QR+Bluetooth handoff. Notes practical limits like 25-resident-key limit on some hardware tokens, >95% browser support, and that developers must store public keys, add enrollment and management UIs, and handle recovery for users.
AI-written summary · about
chapters (15)
- 0:00Intro
- 1:22Status quo of authentication
- 4:18Problems with the status quo
- 6:54Solution: Less knowledge-based authentication
- 8:52Architecture
- 11:06The two WebAuthn Ceremonies
- 15:11Registration ceremony
- 16:56Authentication ceremony
- 21:12Three flavours of WebAuthn
- 25:54Usability problems with WebAuthn
- 33:47Improved usability in login process
- 37:19Synced
- 40:04Cross-device usage of passkeys
- 48:41Passkeys are the next step on the long road to passwordless
- 51:06Takeaways
related talks
47mPasswordless Web
23mOur future without passwords
43mPasskeys in practice: implementing passwordless apps
27mSay Goodbye to Passwords and Hello to WebAuthn
39mNo passwords, no problem: move beyond passwords with webauthn and passkeys
47mPasswordless apps: Passkeys in practice
52mPasswords are Dead, Long live Passkeys!
41mOur future without passwords