Forgetting Passwords like a Pro

on YouTube ↗17m

" summary

Demo of passwordless via SMS codes using the all-0 dashboard and a single-page app shows ID and access tokens returned as JWTs, including the live codes 869 and 746. It explains token anatomy and verification, recommends storing tokens in memory not localStorage, and warns about SMS weaknesses like the S7 network interception attack. Practical details include client ID/domain redirect flow, JWT signature checks, and tradeoffs for magic links, push approvals and SMS as sole factor.

AI-written summary · about

" chapters (5)

1. 0:00Introduction
2. 2:08Login Forms
3. 4:34Demo
4. 12:12Additional Information
5. 13:20Pros and Cons

" related talks

• 38mForgot Password? Yes I Did!Joel Lord · DevFest du bout du monde 2019
• 30mGoing Beyond Passwords: The Future of User AuthenticationGift Egwuenu · DevReach 2023
• 25mAuthentication Beyond SMSKelley Robinson · PasswordsCon 2018 Stockholm
• 17mGoing Beyond Passwords: The Future of User AuthenticationGift Egwuenu · CityJS Berlin 2024
• 47mThe state of passwordless auth on the webPhil Nash · NDC Porto 2023
• 51mYou Shall Not Password: Modern Authentication for Web AppsEli Holderness · NDC Sydney 2022
• 41mThe state of passwordless auth on the webPhil Nash · Øredev 2023
• 47mLet’s stop blaming our users for getting hacked when it is our problem to solveScott Brady · NDC Oslo 2020