Passwords Are So 1990

on YouTube ↗45m

" summary

Argues that passwords are replaceable by WebAuthn which uses public/private keys, demonstrates navigator.credentials.create and .get in JavaScript, and shows USB/Bluetooth/NFC authenticators (YubiKey, Google Titan) and platform authenticators (Touch ID, Windows Hello) actually signing challenges. Shows resident credentials that eliminate typing usernames, notes limits like PIN setup, tiny per-device credential counts (YubiKey ≈ six), no cross-device key export, and the need for backup recovery. Notes browser support (Chrome, Firefox, Edge; Safari behind flag) and that GitHub already supports WebAuthn.

AI-written summary · about

" chapters (13)

1. 0:00Start
2. 1:58FERNANDO CORBATÓ TIME-SHARING SYSTEM
3. 10:32ONE TIME PASSWORD
4. 11:47YOU NEED YOUR CELLPHONE ON HAND
5. 12:26YOU DON'T NEED A SECOND DEVICE
6. 13:45NEEDS A SHARED SECRET BETWEEN THE APP AND AUTHENTICATION SERVICE
7. 15:05YOU RELY ON ANOTHER SERVICE FOR AUTHENTICATION
8. 16:29KEY BASED AUTHENTICATION
9. 16:42HARDWARE AUTHENTICATOR
10. 27:51USE THE CREATED CREDENTIALS
11. 28:56RESIDENT CREDENTIALS
12. 35:37USER CREDENTIAL
13. 36:18CROSS DEVICES CREDENTIALS

" related talks

• 47mPasswords are so 1990Sam Bellen · NDC Oslo 2021
• 24mPasswords are so 1990Sam Bellen · WebCamp Zagreb 2019
• 42mPasswords are so 1990!Sam Bellen · jsday 2022
• 21mPasswords are so 1990Sam Bellen · Voxxed Days Ticino 2019
• 34mPasswords are so 1990?Sam Bellen · JSConf JP 2019
• 39mPasswords are so 1990 - Sam Bellen - PHP UK 2022Sam Bellen · PHP UK Conference 2022
• 38mPasswords Are Dead, Long Live Passwords!Alejandro Oviedo · Node+JS Interactive 2018
• 27mSay Goodbye to Passwords and Hello to WebAuthnBen Dechrai · JSConf Korea 2020 Home Edition