Authentication for humans, why passkeys finally make sense.
summary
Claim: replacing reusable passwords with passkeys removes the shared-secret failure mode. Implementation details: devices generate a key pair using public-key cryptography, private keys live in platform secure enclaves or USB/U2F authenticators, and credentials are origin-bound credentials so phishing sites cannot replay them. Evidence: the uploader shows two real-world examples — phishing that bypasses MFA and cross-site credential reuse — and explains how passkeys prevent those attacks and how biometrics only unlock local keys.
AI-written summary · about
chapters (11)
- 0:00Introduction to passkeys
- 1:31Why passwords fail users
- 7:59Passkeys change auth design
- 12:16Biometrics in passkey security
- 15:47Passkeys stop phishing
- 17:56Password reuse risks
- 20:05Passkeys prevent cross-site leaks
- 22:34Passkeys reduce breach impact
- 23:40Passkeys improve UX
- 25:05Implementing passkeys
- 27:16Q&A
related talks
52mPasskeys: The Good, the Bad and the Ugly
52mPasswords are Dead, Long live Passkeys!
45mPast Time for Passkeys
28mPasskeys: Goodbye Passwords, Hello Frictionless Security!
29mWhat the Authn? Passkeys Offer a Fresh Take to Authentication Dilemmas
06mOur future without passwords
47mPasswordless Web
16mThe end of forgotten passwords - Biometric Authentication