Passwordless Web
summary
Passkeys replace passwords by using WebAuthn/FIDO2 asymmetric keys stored on devices or in vendor clouds, removing shared secrets and blocking phishing via domain-bound challenges. Live demo uses passkeys.org demo and cross‑device login via QR + Bluetooth to sign challenges with a private key that never leaves the phone. Cited numbers: 193 personal + 44 work accounts, 13 billion leaked credentials on Have I Been Pwned, ForgeRock’s ~2 billion exposed in 2021; UBkeys cost ≈€25 and store ~22 passkeys each. Specifications run ~165 pages.
AI-written summary · about
chapters (11)
- 0:00Passwordless security intro
- 1:53Traditional password problems
- 13:48Password leaks and risks
- 20:42Flaws in multi-factor authentication
- 22:50Why passwords are broken
- 23:35Passkeys and WebAuthn intro
- 32:28How passkeys work
- 34:32Live passkey demo
- 39:51Passkeys vs phishing
- 44:30Passkey adoption challenges
- 45:32Summary and future
related talks
47mPasswordless Web
52mPasswords are Dead, Long live Passkeys!
59mPasswordless Future: Using WebAuthn And Passkeys In Practice
41mOur future without passwords
51mA Passwordless Future! Passkeys for Java Developers
28mPasskeys: Goodbye Passwords, Hello Frictionless Security!
45mPast Time for Passkeys
47mPasswordless apps: Passkeys in practice