Passkeys - beyond passwords and OTP - in 4 minutes

https://www.youtube.com/watch?v=2xdV-xut7EQ

Passkeys are a safer and easier alternative to passwords. With passkeys, users can sign in to apps and websites with a biometric sensor (such as a fingerprint or facial recognition), PIN, or pattern, freeing them from having to remember and manage passwords.

Developers and users both hate passwords: they give a poor user experience, they add conversion friction, and they create security liability for both users and developers. Google Password Manager in Android and Chrome reduces the friction through autofill; for developers looking for even further improvements in conversion and security, passkeys and identity federation are the industry's modern approaches.

A passkey can meet multifactor authentication requirements in a single step, replacing both a password and OTP (e.g. 6-digit SMS code) to deliver robust protection against phishing attacks and avoids the UX pain of SMS or app-based one-time passwords. Since passkeys are standardized, a single implementation enables a passwordless experience across all of a users' devices, across different browsers and operating systems.

See also https://www.youtube.com/watch?v=SWocv4BhCNg

13 points · 3 comments · view on lemmy.world

3 Comments

Mythnubb@lemm.ee · 3 pts · 2y

This is great, thanks for sharing!

rimu@piefed.social · 3 pts · 2y

You can try a demo here

https://webauthn.io/

Does not work well on Linux as the workflow is clumsy as it requires a USB stick. Chrome on Android works well.

PipedLinkBot@feddit.rocks · 1 pts · 2y

Here is an alternative Piped link(s):

https://piped.video/watch?v=2xdV-xut7EQ

https://www.piped.video/watch?v=SWocv4BhCNg

Piped is a privacy-respecting open-source alternative frontend to YouTube.

I'm open-source; check me out at GitHub.