#BuildPropulsionLab at #DevoxxUK: @jbaruch with @deepu105
summary
Claims that passkeys replace passwords by using public private key pairs bound to a domain and stored in secure hardware instead of secrets saved in databases, making them phishing-resistant and inherently two factor because authentication requires the device plus biometrics or a PIN. Two deployment patterns are device-bound vs sync passkeys where sync uses iCloud or Google password managers for recovery and device-bound uses USB keys or TPM and needs backup keys. Tools already shipping include Okta, Ory, webauthn4j and upcoming native support in Spring Security 6.4.
AI-written summary · about
related talks
51mA Passwordless Future! Passkeys for Java Developers
52mA Passwordless Future! Passkeys for Java Developers
04mDeepu K Sasidharan at JNation 2024
37mA Passwordless Future! Passkeys for Java Developers
43mPasskeys in practice: implementing passwordless apps
01h 06mTutorial: Passkeys to the People: Building a Modern MFA Application with Open Source...
47mPasswordless Web
47mPasswordless Web
