Anna Poblets from Passage talks with Wes and Scott about passkeys, their advantages over passwords, implementing passkeys on websites or apps, phishing resistance, password recovery workflow, backup devices, recommended UI for passkeys, tech behind passkeys, companies implementing passkeys, and the future of passkeys.
Read more
AI Summary
AI Chapters
Episode notes
auto_awesome
Podcast summary created with Snipd AI
Quick takeaways
Passkeys are a passwordless way to log in to apps and websites, offering improved security and user-friendliness.
Implementing Passkeys requires specialized knowledge and attention to the user experience, with APIs and SDKs available to facilitate the process.
Passkey authentication is gaining momentum, with increased support and resources provided by the FIDO Alliance and passkeys.dev to drive advancements in identity verification.
Deep dives
Pass Keys: The Future of Authentication
Pass keys are introduced as a new way to log in to apps and websites that is fully passwordless. They are more secure and user-friendly than passwords. Pass keys utilize public key cryptography, generating unique private and public keys for each user. The private key remains on the user's device, while the public key is stored on the website server. Pass keys offer improved security, a phishing-resistant experience, and eliminate the need for password management. They can be implemented as the primary form of authentication or as a second factor alongside passwords. Major companies like Amazon and Best Buy have already embraced pass keys, and their adoption is expected to increase in the next few years.
Implementation and User Experience Challenges
Implementing pass keys can be complex, requiring specialized knowledge and attention to the user experience. Developers may use APIs and SDKs, such as the ones provided by Passage, to facilitate the implementation process. User prompts and recovery options are crucial for a seamless transition to pass key authentication. Consistent UI and language across websites help users understand and trust the pass key technology. Websites like kayak.com and OnePassword prioritize pass key logins and reduce support requests compared to password-centric logins. The future may bring additional advancements in the identity space, allowing users to prove their online identity securely while maintaining their privacy.
Platform Support and Future Outlook
Pass key authentication has gained momentum in recent months, with increased support in iOS and Android platforms. The FIDO Alliance and resources like passkeys.dev provide information and guidelines for developers interested in implementing pass keys. Public-key cryptography libraries, such as those open-sourced by OnePassword, contribute to the development of pass key technology. In the next one to two years, more consumer applications are expected to adopt pass keys, leading to improved security and reduced reliance on passwords. The FIDO Alliance continues to drive advancements in identity verification, building on the foundation laid by pass keys. Overall, pass keys offer a promising future for secure and user-friendly authentication.
Sick Pick: Cascadia Board Game
Anna recommends the board game Cascadia, a beautiful tile-based game that involves attracting wildlife and building nature corridors. Cascadia is easy to learn, offers various strategies, and provides an enjoyable gaming experience for both board game enthusiasts and casual players. It makes for a great gift for board game lovers during the holiday season.
For developers interested in pass key implementation, Anna recommends trying Passage. Passage offers APIs, SDKs, and a web component to facilitate pass key integration, making it easier to navigate the complexities of authentication. With a generous free tier and a focus on developer feedback, Passage aims to streamline the pass key implementation process and improve the user experience of secure authentication.
In this supper club episode of Syntax, Wes and Scott talk with Anna Pobletts of Passage about passkeys, how passkeys work, how to implement passkeys on your website or app, what the recommended UI is for passkeys, what happens to your passkey if you lose your phone, and more.