Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls
-
Martina Kraus
Kraus IT Consulting
Application Security Engineer
Keeping applications secure by evolving OAuth 2.0 and OpenID Connect
July 9, 2026
16:10
–
16:40
·
30
min
Stage 10 - powered by TikTok
What this session covers
OAuth 2.0 and OpenID Connect have been around for years to secure web and mobile applications alike with growing popularity.
To keep your applications and their data secure, these standards are evolving to align with security best practices.
Join this talk to see how the FAPI 2.0 Security Profile and the upcoming OAuth 2.1 standard promotes and enforces best practices, how to adapt your applications, and how Keycloak as an Open Source IAM can help you. Expect a demo and examples for some of the enhancements.
World Congress 2026 Europe
Related talks
Bulletproof Web Applications: The 2025 OWASP Top Ten
-
Christian Wenz
Actition
CEO
Beyond authentication: an open-source trust model for the agentic web
-
Alexander Günsche
AWS
Senior Solutions Architect
-
Sabrina Engling
Trusted Shops SE
AI Lead
Small, Secure, Interconnected: The next Internet Protocol
-
Ross Kukulinski
Tailscale
VP of Product