The State of Passwordless Auth on the Web
summary
Passwords remain a usability and security failure — surveys cited: 52% reuse some passwords, 24% use a password manager, 13% reuse the same password always — and the concrete path forward uses existing web APIs: Credential Management / WebAuthn, the Web OTP flow, autocomplete attributes and platform authenticators. A passkeys.io demo shows passkeys (WebAuthn with platform authenticators) syncing across devices and a QR fallback to Chrome, and the demo successfully registers and logs in with biometric verification, so the system works today.
AI-written summary · about
chapters (7)
- 0:00The problem with passwords
- 3:39Trade-offs in authentication
- 5:52Improving password experience
- 10:16Two-factor authentication
- 15:49Security keys and WebAuthn
- 18:56The future of passkeys
- 27:14Implementation and adoption
related talks
51mThe state of passwordless auth on the web
47mThe state of passwordless auth on the web
41mThe state of passwordless auth on the web
16mThe end of forgotten passwords - Biometric Authentication
21mPasswords are so 1990
47mPasswords are so 1990
45mPasswords Are So 1990
18mA path to a world without passwords