Passkeys in Ruby
summary
Explains how WebAuthn/Passkeys replace passwords with public‑key credentials, backing the claim with adoption and risk numbers: 81% of breaches tied to stolen passwords, second‑factor uptake moving from 28% to 52%. Shows working code: a maintained webauthn‑ruby gem, Rails 8 generator, demos and QR portability for cross‑device passkeys. Notes real deployments (GitHub, Shopify, government logins), tradeoffs for device‑bound vs roaming passkeys, and what actually validates on the server.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 1:04What are passkeys
- 8:58WebAuthn standard
- 11:29How WebAuthn works
- 14:17Registration and authentication flows
- 23:55Passwordless authentication
- 26:02Advantages of passkeys
- 27:27Multi-device passkeys
- 29:12Future of passkeys
- 34:20Passkeys in Ruby
- 37:34Demos and examples
- 38:38WebAuthn in Ruby plans
- 40:24Resources and closing
- 41:07Q&A
related talks
27mThe world of Passkeys 🤝🏽 Ruby Slides
39mGo Passwordless with WebAuthn in Ruby
39mNo passwords, no problem: move beyond passwords with webauthn and passkeys
45mPast Time for Passkeys
47mPasswordless Web
52mPasswords are Dead, Long live Passkeys!
43mPasskeys in practice: implementing passwordless apps
31mGetting Started with Passkeys and WebAuthn