Passwords are so 1990
summary
Argues that passwords are replaceable with public/private key flows using the WebAuthn API and hardware or platform authenticators, demonstrates a working Mac Touch ID login and a webauthn.me demo, and explains navigator.credentials.create/get, attestation, challenges and resident credentials. Cites large breaches (Marriott 283M, Facebook 550M, MyFitnessPal 160M, Words With Friends 218M, People Data Lab 1.2B) and a user survey ~81% willing to use biometrics. Notes support in Chrome/Firefox/Safari, caveats for resident keys on Firefox and the need for recovery fallback and testing with YubiKey or Chrome devtools emulation.
AI-written summary · about
chapters (8)
- 0:00Start
- 8:17SO WHAT'S THE PROBLEM WITH PASSWORDS?
- 10:44TIPS FOR A GOOD PASSWORD Use a reasonably long password Don't use personal data Don't reuse passwords
- 14:29YOU RELY ON ANOTHER SERVICE FOR AUTHENTICATION
- 15:55KEY BASED AUTHENTICATION
- 29:04RESIDENT CREDENTIALS
- 35:17USER CREDENTIAL MANAGEMENT
- 35:52CROSS DEVICE CREDENTIALS
