WebAuthn, Yubikeys, and You: What we wish we knew before...
summary
Discord rolls out FIDO2/WebAuthn across 400+ internal users using Okta and Yubico hardware, requiring two authenticators per user (platform Touch ID/Windows Hello plus a roaming key). Deployment uses YubiKey Security Key C NFC (~$30 each), Yubico Enterprise delivery for bulk shipping, and an Octa exception group for edge cases. Results include sharply fewer support lockouts, faster onboarding for most users, long international customs delays (notably Philippines and Colombia), and reliance on Google research showing near-zero account takeovers with keys.
AI-written summary · about
chapters (7)
related talks
47mWhy FIDO Security Keys & Webauthn are Awesome
33mNavigating Passwordless Authentication with FIDO2 & WebAuthn
17mModern Authentication, Real life stories
29mWebAuthn and security keys - unlocking the key to authentication
44mWebAuthn: Strong Authentication vs Privacy vs Convenience
53mUser-friendly, phishing-proof 2FA with WebAuthn
01h 14mWebAuthn: Theory and practice
30mWebAuthn Rocks! Stop authenticating as if it were the 60s