The Problem with Passwords

on YouTube ↗50m

" summary

Claims a practical alternative to passwords: Persona (BrowserID) uses verified email addresses, in‑browser public/private keys, and short-lived assertions; demos log into Wikipedia, the Times crossword and a Node/Express app successfully. Implementation requires loading login.persona.org include.js, calling navigator.id.watch, posting assertions to a fallback verifier (or doing local crypto), and setting sessions — described as four easy steps. A bridge approach works today and the team estimates 80% near-native coverage, but the fallback centralizes verification until native IDP support arrives.

AI-written summary · about

" chapters (16)

1. 0:00Introduction
2. 0:32Passwords hard to secure
3. 2:18Passwords hard to remember
4. 4:47Social login barriers
5. 6:13Why OpenID failed
6. 9:03Ideal login system needs
7. 10:28Introducing Persona
8. 11:11Demo of Persona protocol
9. 14:47Persona replaces passwords
10. 15:16Persona on Times crossword
11. 17:03Fallback for non-native email
12. 19:11Identity bridge for Yahoo
13. 20:38Persona works across all modern browsers
14. 20:59Adding Persona to your site in four easy steps
15. 38:17Stop making password problem worse
16. 39:43Q&A

" related talks

• 45mPasswords Are So 1990Sam Bellen · Voxxed Days Banff 2019
• 21mPasswords are so 1990Sam Bellen · Voxxed Days Ticino 2019
• 47mPasswords are so 1990Sam Bellen · NDC Oslo 2021
• 31mWeb Authentication - Imagine a World Without PasswordsSuby Raman · NodeJs Day 2019
• 42mPasswords are so 1990!Sam Bellen · jsday 2022
• 39mPasswords are so 1990 - Sam Bellen - PHP UK 2022Sam Bellen · PHP UK Conference 2022
• 30mThe State of Passwordless Auth on the WebPhil Nash · JSNation 2023
• 25mMove over passwords, passkeys are my new best friend!Daphne Liu · SeattleJS Conf 2023