Imagine: A world without passwords, it is easy if you try
summary
Passwords fail because they are symmetric secrets that attackers steal (Bangladesh Bank lost $80M after stolen credentials), so FIDO2 replaces them with asymmetric crypto and small signatures that are origin-bound signatures so a login only works for the intended site. The standards covered are CTAP2 and WebAuthn and vendors ship platform authenticators (Windows Hello, iPhone biometric PIN) and cloud-backed hardware keys (USB/NFC/Bluetooth) or password-manager virtual keys; passkeys roll out on iOS16/Android in 2023.
AI-written summary · about
