Passwordless: a story of risk, protection & excellent UX
summary
Argues that replacing passwords with public‑key authentication cuts support load and improves security while keeping UX frictionless, backed by an internal trial of 120 volunteers using WebAuthN and FIDO via the corporate IdP (Okta) and device authenticators like Touch ID on Macs. Implementation uses credential chaining and behavior detection to step up challenges, keeps legacy passwords for a few CLI and app cases, and reports near‑zero access issues, strong user satisfaction, and measurable reduction in password resets.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 1:52Overview
- 2:40Passwords
- 9:15Passwordless
- 17:09Context
- 18:42Web Authentication
- 20:50Signin Policies
- 21:22Hypothesis Driven Design
- 23:19Volunteers
- 23:50Feedback
- 25:39Low CR friction
- 26:36No access issues
- 28:25Conclusion
