Passkeys 101: Technical Principles of FIDO
summary
Explains how FIDO uses an authenticator to create device-bound key pairs so the private key never leaves the user agent and relying party domain checks block man in the middle phishing attempts provides WebAuthn plus CTAP as the actual protocols shows hardware keys, OS‑embedded keys and third‑party passkey sync providers (Apple Google 1Password Dashlane Bitwarden) and demos a cross-device QR flow that uses Bluetooth proximity for one‑time login; claims ~80–90% modern device coverage faster logins and lower cart abandonment.
AI-written summary · about
chapters (11)
- 0:00Introduction to passkeys
- 1:21Threats and the shift
- 4:18FIDO's core philosophy
- 6:25FIDO authentication model
- 10:38Mitigating man-in-the-middle
- 16:03Technical standards and ubiquity
- 20:11Advancement of passkeys
- 25:47Passkey ecosystem structure
- 33:48Autofill and user experience
- 35:44Cross-device authentication
- 40:08Q&A and closing
related talks
29mWhat the Authn? Passkeys Offer a Fresh Take to Authentication Dilemmas
52mPasskeys: The Good, the Bad and the Ugly
26mHey FIDO Meet Passkey
47mPasswordless Web
47mWhy FIDO Security Keys & Webauthn are Awesome
42mBeyond Passwords: How WebAuthn Actually Works
02h 22mFIDO 101
22mPasskeys through FIDO: How to write your own client?