Passwords are so 1990!

on YouTube ↗42m

" summary

Argues that usernames and passwords get replaced by the web authentication API which uses public/private key pairs stored on hardware or built into devices and demonstrated with USB keys and Touch ID, including live calls to navigator.credentials.create and .get and a debugger site webauthen.me that actually generates and verifies challenges. Claims better phishing resistance and no secret storage but shows practical limits: poor credential management, no seamless cross device keys, and the need for account recovery.

AI-written summary · about

" chapters (10)

1. 0:00Passwordless authentication intro
2. 3:22Password history
3. 10:28Password problems
4. 13:18Passwordless methods
5. 18:10Web Authentication API explained
6. 22:25WebAuthn technicals
7. 29:05Resident keys & cross-device
8. 33:43WebAuthn challenges
9. 36:49WebAuthn future
10. 39:37Q&A

" related talks

• 24mPasswords are so 1990Sam Bellen · WebCamp Zagreb 2019
• 21mPasswords are so 1990Sam Bellen · Voxxed Days Ticino 2019
• 45mPasswords Are So 1990Sam Bellen · Voxxed Days Banff 2019
• 47mPasswords are so 1990Sam Bellen · NDC Oslo 2021
• 34mPasswords are so 1990?Sam Bellen · JSConf JP 2019
• 39mPasswords are so 1990 - Sam Bellen - PHP UK 2022Sam Bellen · PHP UK Conference 2022
• 32mPasswords are so 1990Sam Bellen · Best of Web 2019
• 47mThe state of passwordless auth on the webPhil Nash · NDC Porto 2023