The 2F's of passwordless journey
summary
A team describes building Yahoo Account Key: moves from one‑time codes (March 2015) to a push‑prompt system (Oct 2015), rearchitecting user records and APIs to remove passwords, surviving a ~400M‑account breach and scaling from ~1–2M to 20 million users then 50 million users. Key lessons: tackle fear with motivated in‑app prompts, reduce friction with a pocket of success and backup phone recovery, use local biometrics and optional fallbacks, and measure gains (logged‑in sessions rise ~20–30%).
AI-written summary · about
chapters (11)
- 0:00Introduction to passwordless journey
- 1:13Passwordless before passkeys
- 3:46Yahoo data breach impact
- 6:35Fear and friction in adoption
- 9:01Motivation and user context
- 12:48Optionality and ecosystem
- 15:35Q&A session begins
- 19:06Navigating internal stakeholders
- 21:35Customer segment acceptance
- 22:59Removing passwords legacy logic
- 25:10Closing remarks and friendship
related talks
24mEfforts to spread passwordless in Yahoo! JAPAN
37mAuthentication in 2026: A guide to passkeys, digital credentials and more
34mPasswordless: a story of risk, protection & excellent UX
43mPasswordless: a story of risk, protection and excellent UX
30mGoing Beyond Passwords: The Future of User Authentication
42mIntroducing Passkeys for Multiple Use Cases and UX Challenges
38mPasswordless App with Passkey
47mPasswords are so 1990