> Markdown version of [/events/world-congress-2026-europe/sessions/1175-passkeys-truly](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1175-passkeys-truly). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls


- **Date:** Thursday, Jul 9, 2026
- **Time:** 16:50–17:20 (30 min)
- **Room:** Stage 10 - powered by TikTok
- **Event:** World Congress 2026 Europe

## Recording

[Watch recording](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls)

## Description

Passkeys have established themselves as the standard for passwordless authentication, promising to eliminate phishing once and for all. But how secure are they really – and what do developers need to consider during implementation to keep that promise? This talk goes beyond the basics and demonstrates through live coding how to integrate Passkeys with Keycloak. We'll uncover common pitfalls and explain which configurations are critical to ensure true phishing resistance. Practical examples and concrete code demos will help you integrate Passkeys securely and user-friendly into your own applications.

## Speaker

### [Martina Kraus](https://www.wearedevelopers.com/@martinakraus)

Application Security Engineer at Kraus IT Consulting


## Related talks at this congress

- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1159-keeping-applications) — Alexander Schwartz
- [MFA? Game over! Watch your protection collapse – live](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1358-mfa-game-over-watch) — Christoph Menzel
- [You shall (not) pass!? An Introduction to Testing authentication](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/997-you-shall-not-pass) — Ramona Schwering
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1442-checkmate-5-real) — Jasmin Azemović