A Passwordless Future! Passkeys for Java Developers
summary
Argues that replacing passwords with passkeys cuts credential-driven breaches (cites 65% of breaches from DBIR) and demonstrates a Spring Boot app using webauthn4j and Auth0 integration to register and authenticate via WebAuthn/FIDO2. Explains platform vs roaming authenticators, device-bound passkeys versus synced passkeys, Bluetooth cross-device demo with phone-as-authenticator, and tradeoffs: phishing- and remote-attack resistance, built-in second factor, simpler server storage. Demo runs but shows practical hiccups (browser/OS inconsistencies, sync delays).
AI-written summary · about
chapters (15)
- 0:00Introduction and setup
- 1:05Why passwordless matters
- 9:52What are passkeys
- 10:56Public key cryptography basics
- 12:21Understanding authenticators
- 14:08FIDO2 and WebAuthn explained
- 17:43Sync vs device-bound passkeys
- 22:59Passkey registration flow
- 25:52Passkey login flow
- 28:38How passkeys solve password problems
- 31:30Security vs usability comparison
- 35:05Passkey implementation challenges
- 42:18Java libraries for passkeys
- 44:30Spring Security passkey support
- 44:50Learning resources and Q&A
related talks
52mA Passwordless Future! Passkeys for Java Developers
37mA Passwordless Future! Passkeys for Java Developers
49mA Passwordless Future! WebAuthn for Java Developers
43mPasskeys in practice: implementing passwordless apps
47mPasswordless Web
28mPasskeys: Goodbye Passwords, Hello Frictionless Security!
45mPast Time for Passkeys
01h 06mTutorial: Passkeys to the People: Building a Modern MFA Application with Open Source...