WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2023 • Sep 27, 2023

Going Beyond Passwords: The Future of User Authentication

Gift Egwuenu

Are text-based passwords putting your application at risk? Learn to architect frictionless, phishing-resistant authentication using device-bound passkeys, WebAuthn, and single sign-on frameworks.

Pause
Mute Enter Fullscreen
#1 about 4 min

Introduction to modern authentication and web password vulnerabilities

Traditional username and password combinations represent the primary vulnerability for modern web application data breaches.

#2 about 2 min

Implementing guidelines for strong and secure web passwords

Developers must enforce specific constraints like mixed capitalization, symbols, and length boundaries on login forms.

#3 about 3 min

Checking data breaches and utilizing centralized password managers

Verifying credentials against known data breaches combined with password managers centralizes general access safety.

#4 about 2 min

The risks of relying solely on public-private key passphrases

Misplacing hardcoded recovery phrases completely and permanently eliminates a user's ability to access secured accounts.

#5 about 4 min

Integrating passwordless authentication with magic links and SMS

Implementing one-time codes and magic links via the Auth0 Next.js SDK establishes secure passwordless environments.

#6 about 4 min

Layering security mechanisms with multi-factor authentication factors

Combining knowledge, possession, and biometrics through automated calls or authenticator applications ensures robust multilayered security.

#7 about 2 min

Securing application access with WebAuthn and physical FIDO keys

Physical FIDO keys mitigate severe phishing attacks by mandating specific hardware proximity for cross-browser sessions.

#8 about 3 min

Replacing traditional website logins with biometric web passkeys

Linking user profiles directly to native device biometrics streamlines an entirely password-free web authentication cycle.

#9 about 5 min

Architecting single sign-on flows across multiple application domains

Routing authentication through central identity providers utilizes OIDC or SAML protocols to bypass same-origin strictness.

#10 about 2 min

Adopting modern authentication strategies within software development teams

Software teams should conduct deliberate security assessments to iteratively transition platform infrastructure away from conventional passwords.

#11 about 3 min

Addressing security risks with central single sign-on setups

Implementing enterprise-grade infrastructure utilizing account recovery protocols mitigates centralized vulnerabilities when mobile devices get lost.

Matching moments

1:53 min

Overcoming barriers to passwordless authentication adoption

Christoph Menzel Christoph Menzel · WWC Europe 2026

2:16 min

Analyzing friction in traditional authentication flows

Rahat Chowdhury · JS Congress

4:32 min

Shifting organizational security toward phishing-resistant authentication standards

Christoph Menzel Christoph Menzel · WWC Europe 2026

3:22 min

Accelerating adoption through developer resources and user education

Clemens Hübner Clemens Hübner · WWC 2023

4:13 min

Hardware keys and mitigating persistent password vulnerabilities

Chris Heilmann +2 · LIVE

2:20 min

Phasing out passwords and managing passkey account recovery

Martina Kraus Martina Kraus · WWC Europe 2026

More from World Congress 2023

The year 3000, a brief history of Web Development thumbnail
25:30
over 2 years ago

The year 3000, a brief history of Web Development

Lorenzo Pieri

Demografie nutzen um jedem Bewerber das passende Angebot zu machen! thumbnail
8:52
over 2 years ago

Demografie nutzen um jedem Bewerber das passende Angebot zu machen!

Nathalie Gierth

Guided Memory Management: Rust's Ownership Model thumbnail
0:18
almost 3 years ago

Guided Memory Management: Rust's Ownership Model

Stefan Baumgartner

Passwordless future: WebAuthn and Passkeys in practice thumbnail
32:32
almost 3 years ago

Passwordless future: WebAuthn and Passkeys in practice

Clemens Hübner

External Secrets Operator: the secrets management toolbox for self-sufficient teams thumbnail
30:07
almost 3 years ago

External Secrets Operator: the secrets management toolbox for self-sufficient teams

Moritz Johner

Building Reliable Serverless Applications with AWS CDK and Testing thumbnail
25:18
almost 3 years ago

Building Reliable Serverless Applications with AWS CDK and Testing

Raphael Manke

Upcoming sessions on this topic

Open session

World Congress 2026 North America

Secure-by-Inclusion: Preventing Accessibility Barriers from Becoming Security Vulnerabilities

Radostina (Ina) Tsvetkova

Norwegian Directorate of Labour and Welfare (NAV), Senior Advisor in Digital Accessibility and Inclusive Design

Radostina (Ina) Tsvetkova
Open session

World Congress 2026 North America

It passed auth, then production caught fire

Alex Olivier

Co-founder & CPO @ Cerbos | OpenID AuthZEN Co-chair

Alex Olivier
Open session

World Congress 2026 North America

Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale

Abdel Fane

Founder of OpenA2A

Abdel Fane
Open session

World Congress 2026 North America

SecurePrompt: Building a Pre-Flight Security Layer for Agentic AI

Ravi Sastry Kadali

AI/ML Engineer at General Motors

Ravi Sastry Kadali
Open session

World Congress 2026 North America

The Things Your AI Isn't Telling You

Desmond Lamptey

Lead Software Engineer @ Capital One

Desmond Lamptey
Open session

World Congress 2026 North America

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy

Related videos

MFA? Game over! Watch your protection collapse – live thumbnail
28:30
WWC Europe 2026 • about 1 month ago

MFA? Game over! Watch your protection collapse – live

Christoph Menzel

Passwordless Web 1.5 thumbnail
30:21
LIVE • almost 2 years ago

Passwordless Web 1.5

Paweł Łukaszuk

Passwordless future: WebAuthn and Passkeys in practice thumbnail
32:32
WWC 2023 • almost 3 years ago

Passwordless future: WebAuthn and Passkeys in practice

Clemens Hübner

Accelerating Authentication Architecture: Taking Passwordless to the Next Level thumbnail
49:52
LIVE • almost 3 years ago

Accelerating Authentication Architecture: Taking Passwordless to the Next Level

Yedidya Schwartz

No More Post-its: Boost your login security with APIs thumbnail
16:05
WWC 2024 • almost 2 years ago

No More Post-its: Boost your login security with APIs

Alvaro Navarro

Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls thumbnail
31:16
WWC Europe 2026 • about 1 month ago

Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls

Martina Kraus

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.