TEQnation 2024: A Passwordless Future! Passkeys for Developers – Deepu K Sasidharan

Weak passwords remain one of the major causes of breaches and security incidents. The Web Authentication standard provides a robust framework for passwordless authentication using passkeys. Passkeys are the latest revolution in authentication. You may have used it with Google or GitHub. But what exactly is it and how does it work? You will learn all about it in this talk. We will dive into the core concepts of passkeys, their architecture, and their pros and cons. We will see how Passkey leverages public key cryptography and biometrics/hardware authenticators to offer enhanced security and usability while eliminating the vulnerabilities associated with traditional password-based systems. We will explore how developers can leverage WebAuthn libraries to implement passkeys in their apps. We will also learn to use passkeys with external Identity providers. There will be demos, showing step-by-step integration of passkeys into web applications.