Step-by-step procedure and considerations for passkey deployment
summary
Covers planning, implementation and operation steps for passkey rollout with concrete tradeoffs: measure ROI by reduced call‑center password resets and lower failure rates (WebAuthn shows ~1% vs 9.78% for passwords) and faster logins (~4s vs 11s). Recommends WebAuthn signal API to sync account metadata, related origin request to avoid re‑auth across domains, use publicKeyCredentialHints to prefer hardware or hybrid keys, test OS/browser behaviors, phase rollouts, train support staff, and mitigate risks like key sharing, provider compromise and lack of attestation.
AI-written summary · about
chapters (6)
- 0:00Introduction and welcome
- 1:51Planning considerations for passkeys
- 8:52Implementation phase deep dive
- 12:24Security risks and countermeasures
- 18:48User adoption and transition plan
- 22:41Summary and Q&A contact
related talks
45mPast Time for Passkeys
59mPasswordless Future: Using WebAuthn And Passkeys In Practice
31mGetting Started with Passkeys and WebAuthn
37mAuthentication in 2026: A guide to passkeys, digital credentials and more
46mPasskeys in Ruby
47mPasswordless apps: Passkeys in practice
25mMove over passwords, passkeys are my new best friend!
15mA Password? No Thanks, I Have a Passkey