WeAreDevelopers LIVE • Sep 25, 2024

Passwordless Web 1.5

Paweł Łukaszuk

Traditional authentication is broken, but deploying Passkeys isn't just a simple NPM import. Master the complex WebAuthn specification to build virtually perfect, phishing-resistant logins for your applications.

Pause

Mute

Enter Fullscreen

#1 about 3 min

Common issues with creating and remembering diverse passwords

The challenges of generating, memorizing, and reusing traditional combinations across numerous internet accounts.

#2 about 3 min

Counterproductive effects of mandatory password rotation policies

User behaviors and security compromises that occur when businesses force frequent password changes.

#3 about 3 min

Evaluating password managers and physical credential tracking methods

The practical realities and security trade-offs of storing hundreds of personal and business logins.

#4 about 3 min

Exposing user credentials through massive server data breaches

How weak hashing algorithms and logging errors lead to billions of compromised user combinations.

#5 about 4 min

The vulnerability of two-factor authentication to live phishing attacks

How malicious actors bypass code checks and the hardware cost constraints of preventing proxies.

#6 about 4 min

Introducing passkeys and the web authentication protocol components

The hardware and software puzzle pieces needed to adopt asymmetric cryptography for digital verification.

#7 about 4 min

Registering and logging in with primary device passkeys

The seamless user workflow for connecting profiles to local hardware using standard screen locks.

#8 about 4 min

Implementing cross-device authentication and proximity phishing resistance

Connecting computing environments to mobile credentials securely via encrypted bluetooth signals and domain checks.

#9 about 4 min

Synchronizing digital keys across ecosystems and hardware limitations

Exploring storage options spanning integrated cloud accounts, dedicated vaults, and constrained physical tokens.

#10 about 3 min

Engineering challenges and complexities of implementing web authentication

The extensive manual coding and protocol testing developers need to integrate strict security benchmarks.

Matching moments

3:17 min

Platform integration and synchronization using passkeys

Clemens Hübner

Clemens Hübner · World Congress 2023

1:53 min

Overcoming barriers to passwordless authentication adoption

Christoph Menzel

Christoph Menzel · World Congress 2026 Europe

4:13 min

Hardware keys and mitigating persistent password vulnerabilities

Chris Heilmann

Chris Heilmann +2 · LIVE

1:53 min

Demonstration of passwordless registration and login

Clemens Hübner

Clemens Hübner · World Congress 2023

2:09 min

Replacing traditional website logins with biometric web passkeys

Gift Egwuenu · World Congress 2023

3:35 min

How passkey architecture provides built-in phishing resistance

Martina Kraus

Martina Kraus · World Congress 2026 Europe

More from WeAreDevelopers LIVE

WeAreDevelopers LIVE - Is CSS Catching Up to Flash? thumbnail

WeAreDevelopers LIVE - Is CSS Catching Up to Flash?

Chris Heilmann, Daniel Cranney, Bramus Van Damme

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along thumbnail

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along

Chris Heilmann, Daniel Cranney, Krzysztof Cieślak

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak thumbnail

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Open Source Agent Toolkits thumbnail

WeAreDevelopers LIVE - Open Source Agent Toolkits

Chris Heilmann, Daniel Cranney, Eddie Jaoude

Fake or News - AI Music Detectors, Translating Ancient Languages & Tiny Heads in Teslas - Eddie Jaoude thumbnail

Fake or News - AI Music Detectors, Translating Ancient Languages & Tiny Heads in Teslas - Eddie Jaoude

Chris Heilmann, Daniel Cranney

Fake or News: AI Agents Hire Each Other, Spider-Man Ads in Cars & RAM Thieves - Marc Plogas thumbnail

about 1 month ago

Fake or News: AI Agents Hire Each Other, Spider-Man Ads in Cars & RAM Thieves - Marc Plogas

Chris Heilmann, Daniel Cranney, Marc Plogas

Related videos

Passwordless future: WebAuthn and Passkeys in practice thumbnail

World Congress 2023 • almost 3 years ago

Passwordless future: WebAuthn and Passkeys in practice

Clemens Hübner

Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls thumbnail

World Congress 2026 Europe • 3 months ago

Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls

Martina Kraus

Going Beyond Passwords: The Future of User Authentication thumbnail

World Congress 2023 • almost 3 years ago

Going Beyond Passwords: The Future of User Authentication

Gift Egwuenu

MFA? Game over! Watch your protection collapse – live thumbnail

World Congress 2026 Europe • 3 months ago

MFA? Game over! Watch your protection collapse – live

Christoph Menzel

Accelerating Authentication Architecture: Taking Passwordless to the Next Level thumbnail

LIVE • almost 3 years ago

Accelerating Authentication Architecture: Taking Passwordless to the Next Level

Yedidya Schwartz

No More Post-its: Boost your login security with APIs thumbnail

World Congress 2024 • about 2 years ago

No More Post-its: Boost your login security with APIs

Alvaro Navarro

Related articles

CH

Chris Heilmann

The top 200 passwords of 2024 can be cracked in less than a second

Passwords are a pain and with biometric logins, passkeys and other two factor authentication methods should be a thing of the past. In reality, though, a lot of systems still use username and passw...

almost 2 years ago

The top 200 passwords of 2024 can be cracked in less than a second

CH

Chris Heilmann

Dev Digest 115 password beefstew is not Strog/|n0FF

In edition 115 of our Dev Digest we cover how AI changes how code is taught, learn about cryptography, the history of passwords, how the internet is declining and we can play Super Mario on a type ...

over 2 years ago

Dev Digest 115 password beefstew is not Strog/|n0FF

CH

Chris Heilmann

Dev Digest 138 - Are you secure about this?

Hello there! This is the 2nd "out of the can" edition of 3 as I am on vacation in Greece eating lovely things on the beach. So, fewer news, but lots of great resources. Many around the topic of sec...

almost 2 years ago

Dev Digest 138 - Are you secure about this?

DC

Daniel Cranney

Dev Digest 167: Open Source AI, Passwordless Microsoft and Vibe Coding

Inside last week’s Dev Digest 167 . 🖼️ Is vibe coding killing creativity? 🌳 Is ChatGPT not as bad for the environment as we think? ⚠️ 95% of AppSec fixes don’t reduce risks 🔑 Microsoft going passw...

over 1 year ago

A man stands with plans in hand after having been replaced by AI

From learning to earning

Jobs that call for the skills explored in this talk.

about 1 month ago

Identity, Defense & Resilience - Network Security - Manager

Seattle, WA, United States

Expert $99k–232k Cybercrime Cyber Security Network Security

about 1 month ago

Identity, Defense & Resilience - Network Security - Manager

Los Angeles, CA, United States

Expert $99k–232k Cybercrime Cyber Security Network Security

about 2 months ago

Principal Product Security Architect

Valbonne, France

Expert U-Boot Firmware Booting (BIOS)

about 1 month ago

Identity, Defense & Resilience - Network Security - Manager

Philadelphia, PA, United States

Expert $99k–232k Cybercrime Cyber Security Network Security

about 1 month ago

Identity, Defense & Resilience - Network Security - Manager

Detroit, MI, United States

Expert $99k–232k Cybercrime Cyber Security Network Security

Security Architect / Secure Software Developer

Expert €53k Remote OAuth Golang Docker