Move over passwords, passkeys are my new best friend!
summary
Passkeys replace passwords by generating device-bound key pairs using public key cryptography and the WebAuthn flow: the site issues a challenge, the browser does navigator.credentials.create at registration and stores a private key in the OS keychain, and later the site asks for a signature via navigator.credentials.get for authentication. Demos show ~7 seconds to register and ~3 seconds to sign in; sync works via iCloud or Google (or QR/Bluetooth), FIDO and major vendors back the standard, and servers store only public keys and verify signatures.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 1:11The murder of passwords
- 2:20How passkeys work
- 5:54Security and benefits
- 7:29Cryptography fundamentals
- 9:20Web Authentication API
- 13:03Registration workflow
- 17:02Authentication workflow
- 21:04Conclusion and resources
