Presented the State of Passwordless Auth on the web at Web Directions Summit in Sydney. My slides and links are available on SlideShare.

--

Can we get rid of passwords yet? They make for a poor user experience and users are notoriously bad with them. The advent of WebAuthn has brought a passwordless world closer, but where do we really stand?

In this talk we'll explore the current user experience of WebAuthn and the requirements a user has to fulfil for them to authenticate without a password. We'll also explore the fallbacks and safeguards we can use to make the password experience better and more secure. By the end of the session you'll have a vision for how authentication could look in the future and a blueprint for how to build the best auth experience today.

Presented at NDC Sydney.

Can we get rid of passwords yet? They make for a poor user experience and users are notoriously bad with them. The advent of WebAuthn has brought a passwordless world closer, but where do we really stand?

In this talk we'll explore the current user experience of WebAuthn and the requirements a user has to fulfil for them to authenticate without a password. We'll also explore the fallbacks and safeguards we can use to make the password experience better and more secure. By the end of the session you'll have a vision for how authentication could look in the future and a blueprint for how to build the best auth experience today.

Presented at DDD Perth.

It's a common practice to verify a phone number or implement two factor authentication by sending a one time password over SMS. We can all agree that it's a pretty terrible user experience though.

This process may increase security, but the friction can decrease conversion and the user experience in general. Android and iOS have APIs to combat this, so why not the web? In this talk we'll take a look at autocomplete and the WebOTP API to see how the web platform can help us build secure flows and a better experience all round.

Presented at Fenders Perth.

Developing the front-end of a login flow may seem quite straightforward. But in this crucial flow to most applications there is more we can do to make the experience for users both secure and a delight.

In this talk we’ll see how the credential management API is much more exciting than it sounds, use it to reduce friction for users through both login and two factor authentication, and take a look to the future of auth experiences.

Presented at MelbJS

Developing the front-end of a login flow may seem quite straightforward. But in this crucial flow to most applications there is more we can do to make the experience for users both secure and a delight.
In this talk we'll see how the credential management API is much more exciting than it sounds, use it to reduce friction for users through both login and two factor authentication, and take a look to the future of auth experiences.