Say Goodbye to Passwords and Hello to WebAuthn
summary
Claims that WebAuthn replaces passwords with hardware-backed keys and that it eliminates phishing get demonstrated with concrete mechanics: the browser calls navigator.credentials create/get, the authenticator generates a public-private key pair locked to the web origin, and servers store only the public key not passwords. The talk cites ';--have i been pwned?' and nearly 10 billion leaked accounts, shows FIDO security keys and phones working end to end, and links to a live demo at webauthn.me.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 1:54Characteristics
- 2:49Passwords
- 6:05SMS
- 7:58Intercept
- 9:27Biometrics
- 10:51Voice and Fingerprint
- 12:12Multifactor Authentication
- 14:01Passwordless
- 17:54Example
- 24:30Get Method
- 26:04Conclusion
related talks
42mBeyond Passwords: How WebAuthn Actually Works
18mA Developers Guide to WebAuthn
45mPasswords Are So 1990
59mPasswordless Future: Using WebAuthn And Passkeys In Practice
29mWebAuthn and security keys - unlocking the key to authentication
01h 14mWebAuthn: Theory and practice
38mPasswords Are Dead, Long Live Passwords!
31mWeb Authentication - Imagine a World Without Passwords