Web APIs for delightful two factor auth experiences

on YouTube ↗51m

" summary

Shows how to get username/password and SMS 2FA down to one or two clicks using browser features: add autocomplete and inputmode attributes, use the Credential Management API (store/retrieve via navigator.credentials.get / store) and the WebOTP flow that requires the SMS to include the trailing domain+hash. Chrome/Chromium support (~72%) enables silent or mediated auto-signin; Safari/iOS use the one-time-code autofill. Demo builds a working flow that auto-reads the SMS and auto-submits for a two-click login.

AI-written summary · about

" chapters (6)

1. 0:00Start
2. 1:29BETTER AUTHENTICATION EXPERIENCES
3. 7:23BETTER USERNAMES AND PASSWORDS
4. 14:38CREDENTIAL MANAGEMENT
5. 16:18STORE AND RETRIEVE CREDENTIALS
6. 49:16ENHANCING THE EXPERIENCE

" related talks

• 01h 13mMake your authentication flow perfectAnton Nemtsev · HolyJS 2021 Piter
• 08mSMS OTP form best practicesEiji Kitamura · Chrome Dev Summit 2020
• 47mThe state of passwordless auth on the webPhil Nash · NDC Porto 2023
• 01h 28mHow to 2FA-enable Open Source ApplicationsMike Schwartz · Open Source 101 at Home 2020
• 41mThe state of passwordless auth on the webPhil Nash · Øredev 2023
• 01h 14mWebAuthn: Theory and practiceMartin Splitt, Semyon Levenson · HolyJS 2020 Moscow
• 38mThe Present and Future of Standardized Authentication Specifications You Can Experience on Android/Chromeritou · DroidKaigi 2022
• 50mA tale of two sides of 2FAChristine Seeman · NDC London 2020