WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • Sep 25, 2024

Passwordless Web 1.5

Paweł Łukaszuk

Traditional authentication is broken, but deploying Passkeys isn't just a simple NPM import. Master the complex WebAuthn specification to build virtually perfect, phishing-resistant logins for your applications.

Pause
Mute Enter Fullscreen
#1 about 3 min

Common issues with creating and remembering diverse passwords

The challenges of generating, memorizing, and reusing traditional combinations across numerous internet accounts.

#2 about 3 min

Counterproductive effects of mandatory password rotation policies

User behaviors and security compromises that occur when businesses force frequent password changes.

#3 about 3 min

Evaluating password managers and physical credential tracking methods

The practical realities and security trade-offs of storing hundreds of personal and business logins.

#4 about 3 min

Exposing user credentials through massive server data breaches

How weak hashing algorithms and logging errors lead to billions of compromised user combinations.

#5 about 4 min

The vulnerability of two-factor authentication to live phishing attacks

How malicious actors bypass code checks and the hardware cost constraints of preventing proxies.

#6 about 4 min

Introducing passkeys and the web authentication protocol components

The hardware and software puzzle pieces needed to adopt asymmetric cryptography for digital verification.

#7 about 4 min

Registering and logging in with primary device passkeys

The seamless user workflow for connecting profiles to local hardware using standard screen locks.

#8 about 4 min

Implementing cross-device authentication and proximity phishing resistance

Connecting computing environments to mobile credentials securely via encrypted bluetooth signals and domain checks.

#9 about 4 min

Synchronizing digital keys across ecosystems and hardware limitations

Exploring storage options spanning integrated cloud accounts, dedicated vaults, and constrained physical tokens.

#10 about 3 min

Engineering challenges and complexities of implementing web authentication

The extensive manual coding and protocol testing developers need to integrate strict security benchmarks.

Matching moments

3:49 min

Navigating authentication challenges and third-party password managers

Christian Heilmann Christian Heilmann +1 · World Congress 2026 North America

3:17 min

Platform integration and synchronization using passkeys

Clemens Hübner Clemens Hübner · World Congress 2023

1:53 min

Overcoming barriers to passwordless authentication adoption

Christoph Menzel Christoph Menzel · World Congress 2026 Europe

4:13 min

Hardware keys and mitigating persistent password vulnerabilities

Chris Heilmann Chris Heilmann +2 · LIVE

1:53 min

Demonstration of passwordless registration and login

Clemens Hübner Clemens Hübner · World Congress 2023

2:09 min

Replacing traditional website logins with biometric web passkeys

Gift Egwuenu · World Congress 2023

More from WeAreDevelopers LIVE

WeAreDevelopers LIVE - Read more, Prompt Less thumbnail
1:01:30
2 days ago

WeAreDevelopers LIVE - Read more, Prompt Less

Chris Heilmann, Daniel Cranney, Luise Freese

WeAreDevelopers LIVE - Tech Education in Two Languages thumbnail
1:00:18
9 days ago

WeAreDevelopers LIVE - Tech Education in Two Languages

Daniel Cranney, Roxy Rodriguez-Becker

WeAreDevelopers LIVE - Playing in Production thumbnail
1:06:40
16 days ago

WeAreDevelopers LIVE - Playing in Production

Andrew MacLean, Daniel Cranney, Christian Heilmann

WeAreDevelopers LIVE - Is CSS Catching Up to Flash? thumbnail
1:03:33
about 1 month ago

WeAreDevelopers LIVE - Is CSS Catching Up to Flash?

Chris Heilmann, Daniel Cranney, Bramus Van Damme

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along thumbnail
1:21:17
about 1 month ago

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along

Chris Heilmann, Daniel Cranney, Krzysztof Cieślak

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak thumbnail
4:23
about 1 month ago

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak

Chris Heilmann, Daniel Cranney

Upcoming sessions on this topic

Open session

Supply Chain Security for the Everyday Engineer

  • Pradumna Saraf

    Kestra Technologies

    Quality Assurance Engineer

Open session

Shipping MCP to Real Users: Scaling, Auth, and the PII Leak You Didn't See Coming

  • Hadar Geva

    Myop

    CTO & Co-founder

Open session

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

  • Vikram Vaswani

    Consultant

Open session

ULTRON: Your Agent Has No Hands - Real-Time Voice, MCP, and Ten Phones on Stage

  • Sagar Tamang

    Two Spoon Technologies

    AI Engineer

Open session

Build a Zero-Cost AI Agent in Your Browser

  • Aishwarya Mathuria

    Adobe

    Computer Scientist

  • Nishant Thakur

    Adobe

    Senior Computer Scientist

Open session

Prompt Debt: Why Your AI System Is Frozen in Time

  • Suriya Prakash B

    Red Hat

    Principal Software Engineer

Related videos

Passwordless future: WebAuthn and Passkeys in practice thumbnail
32:32
World Congress 2023 • almost 3 years ago

Passwordless future: WebAuthn and Passkeys in practice

Clemens Hübner

Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls thumbnail
31:16
World Congress 2026 Europe • 3 months ago

Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls

Martina Kraus

Going Beyond Passwords: The Future of User Authentication thumbnail
27:55
World Congress 2023 • about 3 years ago

Going Beyond Passwords: The Future of User Authentication

Gift Egwuenu

MFA? Game over! Watch your protection collapse – live thumbnail
28:30
World Congress 2026 Europe • 3 months ago

MFA? Game over! Watch your protection collapse – live

Christoph Menzel

Accelerating Authentication Architecture: Taking Passwordless to the Next Level thumbnail
49:52
LIVE • about 3 years ago

Accelerating Authentication Architecture: Taking Passwordless to the Next Level

Yedidya Schwartz

No More Post-its: Boost your login security with APIs thumbnail
16:05
World Congress 2024 • about 2 years ago

No More Post-its: Boost your login security with APIs

Alvaro Navarro

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.