No More Passwords: How I Got Passkeys Working (Without Losing My Mind)
summary
Demo app implements passkeys end-to-end: Credential Manager API wrapped by a passkeys manager wrapper that handles registration and sign‑in, networks exchange WebAuthn JSON challenges, and a public GitHub repo contains the working example and assetlinks steps. WebViews require extra work — a webview JavaScript bridge, decorated JSON with success/error URLs, and linking SHA‑256 fingerprints via assetlinks.json and Google Play settings. Demo recording shows it working on real devices; supported from Android 9 and improved vendor support on Android 14.
AI-written summary · about
chapters (22)
- 0:00Introduction
- 1:32Password problem in real life
- 3:58Passwords as developer liability
- 4:40What are passkeys and how they work
- 6:07Passkey questions answered
- 10:01Demo app structure
- 11:49Passkey manager wrapper design
- 14:38Checking passkey support
- 16:28WebAuthn server request structure
- 17:52Integrating passkeys in app flow
- 19:56Live demo: passkey auth
- 21:00Passkeys in web views
- 22:45Web view integration flow
- 24:10Linking Android app with domain
- 26:59Final thoughts
- 27:22Q&A
- 27:44Passkeys and DSP2 strong auth
- 28:48Multiple profiles and credential manager
- 29:51Security against MITM attacks
- 31:15Migrating users to passkeys
- 32:18Private key storage and syncing
- 33:24Migrating user databases
related talks
31mGetting Started with Passkeys and WebAuthn
52mPasswords are Dead, Long live Passkeys!
23mOur future without passwords
43mPasskeys in practice: implementing passwordless apps
16mThe end of forgotten passwords - Biometric Authentication
38mPasswordless App with Passkey
59mPasswordless Future: Using WebAuthn And Passkeys In Practice
25mMove over passwords, passkeys are my new best friend!