Our future without passwords
summary
Passkeys replace passwords with device-held private keys and server-held public keys using WebAuthn (navigator.credentials.create / get), preventing server-side secret leaks and phishing and cutting average sign-in time from 30s to 14s in Google research. Support lands broadly — Chrome 108 / Edge 108 / Safari 16 with Firefox following — and syncs via Google Password Manager or Apple Keychain; cross-device QR flow lets an Android-stored passkey log into a macOS browser. Implement with standard server challenge, relyingParty ID and optional requireResidentKey true, and use autocomplete attributes for autofill.
AI-written summary · about
chapters (10)
- 0:00Introduction and agenda
- 1:08The problem with passwords
- 4:00Introducing passkeys
- 8:50Passkey demo
- 10:20Security benefits of passkeys
- 12:11Passkey support and cross-device sync
- 13:37Cross-platform passkey demo
- 15:24Anatomy of a passkey system
- 17:14Implementing passkeys in code
- 20:58Recap and future of passkeys
related talks
41mOur future without passwords
06mOur future without passwords
25mMove over passwords, passkeys are my new best friend!
15mOur future without passwords
52mPasswords are Dead, Long live Passkeys!
52mPasskeys: The Good, the Bad and the Ugly
59mPasswordless Future: Using WebAuthn And Passkeys In Practice
45mPast Time for Passkeys