Passwords are so 1990

on YouTube ↗21m

" summary

Passwords become replaceable by the Web Authentication API using public/private key pairs stored in hardware or platform authenticators (USB, NFC, BLE, Touch ID, Windows Hello). Registration sends a server challenge to the authenticator which signs it and returns a public key and key ID; verification uses that key. Demo site explores resident credentials kept on-device so logins can omit usernames. Limitations: poor per-credential management, no cross‑device sync, risk of lockout without backups. Spec is a W3C recommendation and works in modern browsers (Safari desktop recent; iOS lagging).

AI-written summary · about

" chapters (12)

1. 0:00Introduction
2. 1:10Stickers
3. 1:23History
4. 3:32Problem with passwords
5. 5:08Web Authentication API
6. 5:43Hardware Authenticators
7. 6:58Authentication Request
8. 9:18Web API
9. 11:28Code
10. 15:06Navigator
11. 19:17Credential management
12. 20:35Wrap up

" related talks

• 34mPasswords are so 1990?Sam Bellen · JSConf JP 2019
• 42mPasswords are so 1990!Sam Bellen · jsday 2022
• 24mPasswords are so 1990Sam Bellen · WebCamp Zagreb 2019
• 45mPasswords Are So 1990Sam Bellen · Voxxed Days Banff 2019
• 47mPasswords are so 1990Sam Bellen · NDC Oslo 2021
• 32mPasswords are so 1990Sam Bellen · Best of Web 2019
• 39mPasswords are so 1990 - Sam Bellen - PHP UK 2022Sam Bellen · PHP UK Conference 2022
• 47mThe state of passwordless auth on the webPhil Nash · NDC Porto 2023