The state of passwordless auth on the web
summary
Gives concrete signals: current adoption numbers (52% reuse some passwords 35% use unique ones 11% reuse the same one 24% use a password manager from a 2018 survey), demos of navigator.credentials.get and navigator.credentials.create, use of autocomplete and the Web OTP flow for SMS, and a working QR cross‑device flow showing pass keys syncing via Google Apple and OnePassword while Firefox support lags. Explains tradeoffs, when to fallback to passwords plus 2FA, and shows code and UX details that are immediately implementable.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:24Passwords are terrible
- 6:20UX versus security tradeoffs
- 8:48Passwords with browser APIs
- 15:52Two-factor challenges
- 24:20Security keys and WebAuthn
- 27:51Passkeys as future
- 35:26Passkeys benefits and support
- 37:53Passkey implementation tips
- 40:42Conclusion
