Passwordless BankID with Passkeys and WebAuthn
summary
BankID implements passkeys and WebAuthn (CTAP2 + WebAuthn) to replace passwords with platform-backed private keys stored in secure enclaves, linking each key to an existing BankID account. Launch delays (iOS iCloud sync forced a native-app fallback) push rollout to April; adoption reaches 3 million users and ~16 million transactions/month. Major operational surprises: Android briefly stops providing attestations (98% outage fixed in nine days), Firefox Mobile blocks attestation UI, and a Google Password Manager passphrase bug breaks some enrollments. Attestation and cross-device sync remain key risks.
AI-written summary · about
chapters (11)
- 0:00Introduction to BankID
- 1:15Understanding BankID
- 4:03The problem with passwords
- 9:46Transitioning to passwordless
- 12:37FIDO alliance and WebAuthn
- 16:14Implementing FIDO2 credentials
- 20:51Demo of biometric BankID
- 26:35Challenges with iOS integration
- 32:46The road to launch
- 39:21Real-world implementation bugs
- 48:53Conclusion
