No passwords, no problem: move beyond passwords with webauthn and passkeys
summary
WebAuthn plus passkeys replace passwords with public-key cryptography and authenticator-backed MFA, making logins phishing-resistant and non-reusable across domains. Demoed a small Ruby on Rails demo that registers, syncs (iCloud/Google) and uses device-bound passkeys and multi-device flow; the demo authenticates successfully. Limitations include fragmented OS/browser support, cloud-vendor reliance for sync passkeys, enterprise policy restrictions, and no standardized recovery/reset flow yet.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 3:54Passwordless alternatives
- 8:10Passwordless basics
- 13:51WebAuthn security
- 19:58Passkeys advantages
- 24:58Demo: passkeys
- 29:34Passkey adoption challenges
- 32:47Where to use passkeys
- 35:41Closing & Q&A
related talks
39mGo Passwordless with WebAuthn in Ruby
46mPasskeys in Ruby
59mPasswordless Future: Using WebAuthn And Passkeys In Practice
31mGetting Started with Passkeys and WebAuthn
52mPasswords are Dead, Long live Passkeys!
25mMove over passwords, passkeys are my new best friend!
27mThe world of Passkeys 🤝🏽 Ruby Slides
51mA Passwordless Future! Passkeys for Java Developers