Getting Started with Passkeys and WebAuthn
summary
Demo code uses the simple-webauthn library and browser navigator.credentials to register and authenticate passkeys via iCloud Keychain, Chrome profile or QR to a phone; a live demo successfully creates and signs credentials but the session handling is ephemeral. Implementation requires setting rpId and encoding challenges server-side, recommends resident key required for true passkey flows and userVerification preferred, tracks the authenticator counter to detect cloning. Notes include 93% global support and surprising stats: ~40% report breaches and two-thirds reuse passwords.
AI-written summary · about
chapters (9)
- 0:00Introduction and overview
- 2:14Problems with passwords
- 3:55WebAuthn and passkey concepts
- 7:01Passkeys and use cases
- 9:03Authentication data flow
- 12:41Practical passkey demo
- 14:44Implementation details
- 26:01Limitations and considerations
- 29:32Resources and conclusion
related talks
25mMove over passwords, passkeys are my new best friend!
39mNo passwords, no problem: move beyond passwords with webauthn and passkeys
59mPasswordless Future: Using WebAuthn And Passkeys In Practice
52mPasswords are Dead, Long live Passkeys!
23mOur future without passwords
43mPasskeys in practice: implementing passwordless apps
47mPasswords are so 1990
45mPast Time for Passkeys