WeAreDevelopers LIVE • Sep 25, 2024

Passwordless Web 1.5

Paweł Łukaszuk

Traditional authentication is broken, but deploying Passkeys isn't just a simple NPM import. Master the complex WebAuthn specification to build virtually perfect, phishing-resistant logins for your applications.

Pause

Mute

Enter Fullscreen

#1 about 3 min

Common issues with creating and remembering diverse passwords

The challenges of generating, memorizing, and reusing traditional combinations across numerous internet accounts.

#2 about 3 min

Counterproductive effects of mandatory password rotation policies

User behaviors and security compromises that occur when businesses force frequent password changes.

#3 about 3 min

Evaluating password managers and physical credential tracking methods

The practical realities and security trade-offs of storing hundreds of personal and business logins.

#4 about 3 min

Exposing user credentials through massive server data breaches

How weak hashing algorithms and logging errors lead to billions of compromised user combinations.

#5 about 4 min

The vulnerability of two-factor authentication to live phishing attacks

How malicious actors bypass code checks and the hardware cost constraints of preventing proxies.

#6 about 4 min

Introducing passkeys and the web authentication protocol components

The hardware and software puzzle pieces needed to adopt asymmetric cryptography for digital verification.

#7 about 4 min

Registering and logging in with primary device passkeys

The seamless user workflow for connecting profiles to local hardware using standard screen locks.

#8 about 4 min

Implementing cross-device authentication and proximity phishing resistance

Connecting computing environments to mobile credentials securely via encrypted bluetooth signals and domain checks.

#9 about 4 min

Synchronizing digital keys across ecosystems and hardware limitations

Exploring storage options spanning integrated cloud accounts, dedicated vaults, and constrained physical tokens.

#10 about 3 min

Engineering challenges and complexities of implementing web authentication

The extensive manual coding and protocol testing developers need to integrate strict security benchmarks.

Matching moments

3:17 min

Platform integration and synchronization using passkeys

Clemens Hübner

Clemens Hübner · World Congress 2023

1:53 min

Overcoming barriers to passwordless authentication adoption

Christoph Menzel

Christoph Menzel · World Congress 2026 Europe

4:13 min

Hardware keys and mitigating persistent password vulnerabilities

Chris Heilmann +2 · LIVE

1:53 min

Demonstration of passwordless registration and login

Clemens Hübner

Clemens Hübner · World Congress 2023

2:09 min

Replacing traditional website logins with biometric web passkeys

Gift Egwuenu · World Congress 2023

3:35 min

How passkey architecture provides built-in phishing resistance

Martina Kraus

Martina Kraus · World Congress 2026 Europe

More from WeAreDevelopers LIVE

Fake or News - AI Music Detectors, Translating Ancient Languages & Tiny Heads in Teslas - Eddie Jaoude thumbnail

Fake or News - AI Music Detectors, Translating Ancient Languages & Tiny Heads in Teslas - Eddie Jaoude

Chris Heilmann, Daniel Cranney

Fake or News: AI Agents Hire Each Other, Spider-Man Ads in Cars & RAM Thieves - Marc Plogas thumbnail

Fake or News: AI Agents Hire Each Other, Spider-Man Ads in Cars & RAM Thieves - Marc Plogas

Chris Heilmann, Daniel Cranney, Marc Plogas

WeAreDevelopers - Of Agents and Robots thumbnail

WeAreDevelopers - Of Agents and Robots

Chris Heilmann, Daniel Cranney, Marc Plogas

WeAreDevelopers LIVE - How DevRel Makes Tech More Human thumbnail

WeAreDevelopers LIVE - How DevRel Makes Tech More Human

Chris Heilmann, Daniel Cranney

Fake or News: Smart Glasses in Court, Medical Advice Watches & Mushroom Electonics - Jason Torres thumbnail

Fake or News: Smart Glasses in Court, Medical Advice Watches & Mushroom Electonics - Jason Torres

Chris Heilmann, Daniel Cranney

Aliens in Quarantine, Python Deprecates Loops, and AI Buys Old Books - Zbyszek Tenerowicz thumbnail

Aliens in Quarantine, Python Deprecates Loops, and AI Buys Old Books - Zbyszek Tenerowicz

Chris Heilmann, Daniel Cranney

Upcoming sessions on this topic

World Congress 2026 North America

September 25, 2026 · 11:00–11:30

Stage 6

Secure-by-Inclusion: Preventing Accessibility Barriers from Becoming Security Vulnerabilities

Radostina (Ina) Tsvetkova

Norwegian Directorate of Labour and Welfare (NAV), Senior Advisor in Digital Accessibility and Inclusive Design

Radostina (Ina) Tsvetkova

World Congress 2026 North America

September 24, 2026 · 14:25–14:35

Outdoor Stage

SecurePrompt: Building a Pre-Flight Security Layer for Agentic AI

Ravi Sastry Kadali

AI/ML Engineer at General Motors

Ravi Sastry Kadali

World Congress 2026 North America

September 24, 2026 · 17:30–18:00

Stage 5

Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale

Abdel Fane

Founder of OpenA2A

Abdel Fane

World Congress 2026 North America

September 24, 2026 · 16:10–16:40

Stage 3

Responsible AI Architecture with Zero Trust Agents

Ashok Prakash

Staff ML Engineer at Apple

Ashok Prakash

World Congress 2026 North America

September 24, 2026 · 16:10–16:40

Stage 5

From Software Agents to Physical Devices: Inside the Agentic Hardware Stack

Michael Yuan, Vivian Hu

Michael Yuan

Vivian Hu

World Congress 2026 North America

September 25, 2026 · 13:30–14:00

Stage 9

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy

Related videos

Passwordless future: WebAuthn and Passkeys in practice thumbnail

World Congress 2023 • almost 3 years ago

Passwordless future: WebAuthn and Passkeys in practice

Clemens Hübner

Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls thumbnail

World Congress 2026 Europe • about 2 months ago

Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls

Martina Kraus

Going Beyond Passwords: The Future of User Authentication thumbnail

World Congress 2023 • almost 3 years ago

Going Beyond Passwords: The Future of User Authentication

Gift Egwuenu

MFA? Game over! Watch your protection collapse – live thumbnail

World Congress 2026 Europe • about 2 months ago

MFA? Game over! Watch your protection collapse – live

Christoph Menzel

Accelerating Authentication Architecture: Taking Passwordless to the Next Level thumbnail

LIVE • almost 3 years ago

Accelerating Authentication Architecture: Taking Passwordless to the Next Level

Yedidya Schwartz

No More Post-its: Boost your login security with APIs thumbnail

World Congress 2024 • about 2 years ago

No More Post-its: Boost your login security with APIs

Alvaro Navarro

Related articles

CH

Chris Heilmann

The top 200 passwords of 2024 can be cracked in less than a second

Passwords are a pain and with biometric logins, passkeys and other two factor authentication methods should be a thing of the past. In reality, though, a lot of systems still use username and passw...

almost 2 years ago

The top 200 passwords of 2024 can be cracked in less than a second

CH

Chris Heilmann

Dev Digest 115 password beefstew is not Strog/|n0FF

In edition 115 of our Dev Digest we cover how AI changes how code is taught, learn about cryptography, the history of passwords, how the internet is declining and we can play Super Mario on a type ...

over 2 years ago

Dev Digest 115 password beefstew is not Strog/|n0FF

CH

Chris Heilmann

Dev Digest 138 - Are you secure about this?

Hello there! This is the 2nd "out of the can" edition of 3 as I am on vacation in Greece eating lovely things on the beach. So, fewer news, but lots of great resources. Many around the topic of sec...

almost 2 years ago

Dev Digest 138 - Are you secure about this?

DC

Daniel Cranney

Dev Digest 167: Open Source AI, Passwordless Microsoft and Vibe Coding

Inside last week’s Dev Digest 167 . 🖼️ Is vibe coding killing creativity? 🌳 Is ChatGPT not as bad for the environment as we think? ⚠️ 95% of AppSec fixes don’t reduce risks 🔑 Microsoft going passw...

over 1 year ago

A man stands with plans in hand after having been replaced by AI

From learning to earning

Jobs that call for the skills explored in this talk.

about 1 month ago

Principal Software Engineer, Identity

Expert Remote Ruby OAuth OpenID

Senior Software Engineer, Identity Platform

Expert $124k–329k Remote Ruby OAuth Golang

about 1 month ago

Lead Cyber Security Architect Privileged Identity Management (PIM)

Bamberg, Germany

Expert €87k–128k Cyber Security Cloud Computing Software Systems

about 2 months ago

Cyber Security Architect

Experienced Middleware Smart Cards Cyber Security

Cyber Security Architect

Experienced €71k–104k Middleware Smart Cards Cyber Security

about 1 month ago

Staff Developer Advocate, GitHub Security Lab

Experienced $121k–323k Remote Git Github Databases