Secure and Accessible Login Systems - Ramona Schwering
How can you strengthen login security without locking out your users?
#1about 3 minutes
The developer advocate's role in accessible security
A developer advocate champions user needs by balancing the inherent tension between robust authentication security and inclusive, accessible design.
#2about 4 minutes
Avoiding common accessibility and security pitfalls
Overly specific error messages, exploitable autocomplete features, and a lack of diverse authentication options can inadvertently lock users out or create vulnerabilities.
#3about 2 minutes
Using tools and frameworks to improve accessibility
Developers can leverage browser dev tools and Lighthouse audits to find issues, but must remain mindful that frameworks do not automatically guarantee accessibility.
#4about 4 minutes
Navigating modern challenges like AI agents and CAPTCHAs
The rise of helpful AI agents creates scraping risks, while traditional CAPTCHAs pose significant accessibility barriers and should be replaced with invisible alternatives.
#5about 2 minutes
The difficult arms race of online age verification
Implementing reliable age verification is a constant struggle against circumvention techniques like deepfakes, making it a challenging cat-and-mouse game.
#6about 6 minutes
Practical takeaways from the accessibility masterclass
The masterclass provides hands-on techniques for developers and designers, including how to avoid common mistakes like writing overly-revealing login error messages.
#7about 3 minutes
The value of community and conference learning
Learning from direct user feedback in workshops and informal conversations at developer conferences provides crucial real-world insights into accessibility and security.
Related jobs
Jobs that call for the skills explored in this talk.
The Overflow: 5 Security and Privacy Tools for DevelopersWe’re back again with another edition of the Overflow, where we share some of the best tools we’ve found from around the web that we just couldn’t cram into the already jam-packed editions of the Dev Digest.
So let’s take a look at five security and ...
Daniel Cranney
Dev Digest 170: All things MCP, huge login data leaks and web privacyInside last week’s Dev Digest 170 .
🙌 MCP - Hype or hope?
🤖 Hidden costs of AI coding
😬 2 billion Discord messages leaked
🕵️ W3C releases web privacy principles
⚠️ Detecting malicious unicode
🎂 The history of JavaScript and Java at 30
▦ A Tailwind g...
From learning to earning
Jobs that call for the skills explored in this talk.