A path to a world without passwords
summary
Passwords are brittle: phishing and reused credentials break them. WebAuthn implements FIDO public‑key credentials so authenticators (security keys or platform authenticators with biometrics) register per origin and stop phishing; discoverable credentials remove username entry; passkeys sync FIDO credentials across Android Chrome and enable QR-based cross‑device sign‑in; WebOTP and SMS OTPs improve UX but risk number hijack; and a privacy‑focused federated flow, FedCM, mediates IdP sign‑in without third‑party cookies for a gradual path off passwords.
AI-written summary · about
chapters (6)
- 0:00The problem with passwords
- 2:06Introduction to WebAuthn
- 5:06Platform authenticators
- 7:24Passkeys and discoverability
- 11:00Securing existing logins
- 13:31Identity federation and FedCM
related talks
33mNavigating Passwordless Authentication with FIDO2 & WebAuthn
33mSimple. Open. Mobile: A Look at the Future of Strong Authentication
41mOur future without passwords
30mThe State of Passwordless Auth on the Web
07mImagine: A world without passwords, it is easy if you try
38mJourney to passwordless
38mPasswords Are Dead, Long Live Passwords!
27mSay Goodbye to Passwords and Hello to WebAuthn