WebAuthn and security keys - unlocking the key to authentication
summary
Claims that 43% of users still fall for phishing and that Google found 3.3 billion credentials online drive the need for stronger auth; Google says it proactively secured about 67 billion credential checks. The concrete stack is WebAuthn/FIDO2 + CTAP with U2F security keys and built‑in platform authenticators (USB/NFC/BLE, Chrome 70+, Windows Hello, Android biometrics). Demoed: create/get API, cross‑app credential sharing, and a security key blocks phishing by verifying origin; prototype even shows phone-to-laptop BLE transfer of a local signature to bootstrap passwordless logins.
AI-written summary · about
chapters (6)
- 0:00Introduction and problem
- 8:45What is WebAuthn
- 15:23Security keys and U2F
- 21:17Bootstrapping and user journeys
- 25:05Demo and built-in authenticators
- 28:13Cross-device authentication
related talks
33mSimple. Open. Mobile: A Look at the Future of Strong Authentication
26mWebAuthn 101 - Demystifying WebAuthn
01h 14mWebAuthn: Theory and practice
47mWhy FIDO Security Keys & Webauthn are Awesome
27mSay Goodbye to Passwords and Hello to WebAuthn
30mWebAuthn Rocks! Stop authenticating as if it were the 60s
53mUser-friendly, phishing-proof 2FA with WebAuthn
40mWebAuthn 201: How to FIDO