Passwords are not Enough
summary
Live code of Authy integration in 15–20 minutes into a Rails app using Twilio tools, adding authy_id, phone and country code fields, calling Authy API to send SMS and verify tokens, and preserving pre-2FA session state; demo uses Coinbase-style transaction protection and a Chrome Authy fallback and succeeds. Presenter cites Authy on 2000+ sites and 1M+ users and shows decreased bitcoin theft after 2FA, so the claim, tools, numbers and working proof are all concrete.
AI-written summary · about
chapters (22)
- 0:00Intro
- 4:49Matt
- 9:35Matts story
- 12:17Twilio
- 14:31authy
- 15:16codeclimate
- 15:33Coinbase
- 17:31Coinbase Two Factor Off
- 20:41Accessing Sensitive Data
- 21:11Account Creation
- 25:26API Key
- 25:45Initializer
- 27:37Adding Authy ID
- 28:39Changing View
- 28:54CSS Tiles
- 30:42Console View
- 31:15Register User
- 34:51Create Routes
- 35:09Set Pre2FA
- 37:01App View
- 37:15Verification Code
- 44:28Conclusion
related talks
25mAuthentication Beyond SMS
39mGo Passwordless with WebAuthn in Ruby
39mNo passwords, no problem: move beyond passwords with webauthn and passkeys
17m2FA in 2020 & Beyond
51mWeb APIs for delightful two factor auth experiences
30mGoing Beyond Passwords: The Future of User Authentication
39m2FA, WTF?
29mTackling Authentication with Phoenix