A Passwordless Future! WebAuthn for Java Developers
summary
Claims password reuse causes most breaches—about 84% credential compromise and 36% phishing—and shows a concrete Java path away from passwords using webauthn + Spring Security + Okta. Live demos generate and verify FIDO2/passkey credentials with a YubiKey and platform biometrics, using webauthn4j (and a Yubico library) as the relaying-party implementation. Explains hardware-bound vs. synced passkeys, how the browser discovers credentials, and demonstrates successful registration and login flows with code and a runnable Spring Boot example.
AI-written summary · about
chapters (16)
- 0:00Introduction and speaker background
- 1:04Why we need passwordless authentication
- 5:42What is passwordless and passkeys
- 9:12WebAuthn and FIDO2 explained
- 13:27Passkeys variants and security
- 16:35Passkeys registration flow
- 18:41Passkeys login flow
- 20:46Why passkeys are superior to passwords
- 26:24Passkeys security and usability comparison
- 28:13Live coding demo with Spring Boot
- 37:03Passkeys vs FIDO MFA differences
- 40:11Challenges with passkeys adoption
- 43:21Passkeys backup and recovery
- 44:25Browser and OS compatibility
- 46:29Java libraries for WebAuthn
- 48:58Resources and closing remarks
related talks
37mA Passwordless Future! Passkeys for Java Developers
52mA Passwordless Future! Passkeys for Java Developers
51mA Passwordless Future! Passkeys for Java Developers
43mPasskeys in practice: implementing passwordless apps
45mPassword-less apps: implementing WebAuthN
40mGoing passwordless with Web Authentication
27mSay Goodbye to Passwords and Hello to WebAuthn
45mSecure your application with WebAuthn