“You still use the password after all” – Exploring FIDO2 Security Keys in a Small
summary
A small life‑science software company deploys FIDO2 security keys as an optional primary login method for 8 employees, 4 weeks, with data from server logs and diaries plus semi‑structured interviews. Implementation requires a PIN so keys act as public‑key credentials bound to the site. Users report keys feel more secure but benefits are intangible, worry about loss/lockout, and sometimes forget to use them; measured authentication is slower than browser password autofill, raising adoption and workflow concerns.
AI-written summary · about
chapters (8)
- 0:00Intro
- 0:17WEB AUTHENTICATION VIA PASSWORDS
- 0:27PHISHING OF PASSWORDS
- 1:09FIDO2 "PASSWORDLESS" SETUP
- 2:01STUDY PROTOCOL
- 2:27SECURITY AND PURPOSE
- 3:07ADOPTION BARRIERS
- 3:47AUTHENTICATION TIMINGS
related talks
26mPasskeys for Financial Institutions: Why & How
24mOf Two Minds about Two-Factor: Understanding Everyday FIDO U2F Usability
43mPasswordless: a story of risk, protection and excellent UX
24mAchieving strategic outcomes with FIDO: The phishing-resistant user
02h 22mFIDO 101
26mHey FIDO Meet Passkey
56mPasskeys 101: Technical Principles of FIDO
45mPanel: America Loves FIDO