Passkeys: The Good, the Bad and the Ugly
summary
Claim: passkeys are ready for mass rollout because Apple Google and Microsoft platforms now implement FIDO public/private‑key credentials that are phishing‑resistant and avoid server‑side secrets. Implementation details: passkeys sync/back up via platform stores (iCloud, Google Password Manager), support cross‑device sign‑in using a Bluetooth cross‑device protocol plus QR linking, and are exposed to sites via WebAuthn calls like navigator.credentials.create and a silent availability check. Demo shows creation, sync and cross‑device login working; gaps remain in UX for multi‑device key management, regulation, Linux support and device‑malware threats.
AI-written summary · about
chapters (6)
- 0:00Introduction and overview
- 10:08What are passkeys
- 21:52User journeys and demos
- 34:13Code samples and implementation
- 38:24Good, bad and ugly of passkeys
- 44:02Q&A session
related talks
56mPasskeys 101: Technical Principles of FIDO
41mOur future without passwords
23mOur future without passwords
47mPasswordless Web
06mOur future without passwords
52mPasswords are Dead, Long live Passkeys!
30mAuthentication for humans, why passkeys finally make sense.
59mPasswordless Future: Using WebAuthn And Passkeys In Practice