SlideShare a Scribd company logo
1 of 61
Download to read offline
FORGOT PASSWORD? YES I
DID!
AN INTRO TO PASSWORDLESS AUTHENTICATION
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
ABOUT ME
@joel__lord
joellord
PASSWORDS
ARE BAD
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
PASSWORDS ARE BAD
▸ Help desk costs
▸ Technology acquisition costs
▸ Management and operations costs
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
PASSWORDS ARE BAD
▸ 2,6G data records compromised in
2017
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
PASSWORDS ARE BAD
▸ 2,6G data records compromised in
2017
▸ https://breachlevelindex.com
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
PASSWORDS ARE BAD
▸ More computing power === easier
cracking
▸ More social media presence ===
easier social engineering
▸ Users will always be your weakest
link
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
PASSWORDS ARE BAD
▸ 23% of users admit having only
one password
▸ More than 60% of users use at
least two devices everyday
▸ We all hate passwords!
@joel__lord
#BocaJS
@joel__lord
#BocaJS
@joel__lord
#BocaJS
@joel__lord
#BocaJS
WHAT CAN YOU
DO?
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
WHAT CAN WE DO?
▸ Use best practices
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
OAUTH - IMPLICIT FLOW
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
OAUTH - IMPLICIT FLOW
⛔
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
OAUTH - IMPLICIT FLOW
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
OAUTH - IMPLICIT FLOW
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
OAUTH - IMPLICIT FLOW
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
OAUTH - IMPLICIT FLOW
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
OAUTH - IMPLICIT FLOW
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
OAUTH - IMPLICIT FLOW
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
WHAT CAN WE DO?
▸ Use best practices
▸ Delegate
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
WHAT CAN WE DO?
▸ Use best practices
▸ Delegate
▸ MFA
FORGET PASSWORDS
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
FORGET PASSWORDS
▸ Avoid reusing passwords
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
FORGET PASSWORDS
▸ Avoid reusing passwords
▸ Use a password manager
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
ALTERNATIVES
▸ WebAuthn
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
ALTERNATIVES
▸ WebAuthn
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
ALTERNATIVES
▸ WebAuthn
DEAR DEMO GODS,
PLEASE LET THIS WORK
WEBAUTHN DEMO
Demo src: https://webauthn.me/
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
ALTERNATIVES
▸ WebAuthn
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
ALTERNATIVES
▸ WebAuthn
▸ Biometrics
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
BIOMETRICS
https://www.microsoft.com/en-us/research/wp-content/uploads/2008/10/ECCV_CAT_PROC.pdf
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
BIOMETRICS
https://www.microsoft.com/en-us/research/wp-content/uploads/2008/10/ECCV_CAT_PROC.pdf
DEAR DEMO GODS,
PLEASE LET THIS WORK
BIOMETRICS DEMO
Demo src: https://voiceit.io/
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
ALTERNATIVES
▸ WebAuthn
▸ Biometrics
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
ALTERNATIVES
▸ WebAuthn
▸ Biometrics
▸ Magic Links
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
ALTERNATIVES
▸ WebAuthn
▸ Biometrics
▸ Magic Links
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
MAGIC LINKS (POST /AUTHORIZE)
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
MAGIC LINKS (POST /AUTHORIZE)
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
MAGIC LINKS (POST /AUTHORIZE)
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
MAGIC LINKS (POST /AUTHORIZE)
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
MAGIC LINKS (POST /AUTHORIZE)
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
MAGIC LINKS (GET /LOGIN/{MAGICLINK})
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
MAGIC LINKS (GET /LOGIN/{MAGICLINK})
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
MAGIC LINKS (GET /LOGIN/{MAGICLINK})
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
MAGIC LINKS (GET /LOGIN/{MAGICLINK})
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
MAGIC LINKS (GET /LOGIN/{MAGICLINK})
DEAR DEMO GODS,
PLEASE LET THIS WORK
MAGIC LINK DEMO
Demo src: https://github.com/joellord/secure-spa-auth0/
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
ALTERNATIVES
▸ Yubikeys
▸ Biometrics
▸ Magic Links
FUTURE OF IDENTITY
MANAGEMENT
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
RESOURCES
▸ OAuth & Open ID Connect
▸ http://bit.ly/oauth-talk
▸ JWTs
▸ https://jwt.io
▸ WebAuthn
▸ http://bit.ly/webauthn-demo
▸ VoiceIt integration with Auth0
▸ http://bit.ly/auth0-voiceit
@joel__lord
joellord
FORGOT PASSWORD? YES I DID!
BocaJS
March 5th, 2019
THANK YOU !
TEXT
TEXT

More Related Content

Similar to Forgot Password? Yes I Did!

Similar to Forgot Password? Yes I Did! (6)

Forgot Password? Yes I Did!
Forgot Password? Yes I Did!Forgot Password? Yes I Did!
Forgot Password? Yes I Did!
 
SEO for WordPress
SEO for WordPressSEO for WordPress
SEO for WordPress
 
Codemotion Berlin 2018 - AI with a devops mindset: experimentation, sharing a...
Codemotion Berlin 2018 - AI with a devops mindset: experimentation, sharing a...Codemotion Berlin 2018 - AI with a devops mindset: experimentation, sharing a...
Codemotion Berlin 2018 - AI with a devops mindset: experimentation, sharing a...
 
Thiago de Faria - AI with a devops mindset - experimentation, sharing and eas...
Thiago de Faria - AI with a devops mindset - experimentation, sharing and eas...Thiago de Faria - AI with a devops mindset - experimentation, sharing and eas...
Thiago de Faria - AI with a devops mindset - experimentation, sharing and eas...
 
Data driven devops as presented at Codemash 2018
Data driven devops as presented at Codemash 2018Data driven devops as presented at Codemash 2018
Data driven devops as presented at Codemash 2018
 
Dawn Anderson SEO Consumer Choice Crawl Budget Optimization Conflicts
Dawn Anderson SEO Consumer Choice Crawl Budget Optimization ConflictsDawn Anderson SEO Consumer Choice Crawl Budget Optimization Conflicts
Dawn Anderson SEO Consumer Choice Crawl Budget Optimization Conflicts
 

More from Joel Lord

More from Joel Lord (20)

From Ceasar Cipher To Quantum Cryptography
From Ceasar Cipher To Quantum CryptographyFrom Ceasar Cipher To Quantum Cryptography
From Ceasar Cipher To Quantum Cryptography
 
I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)
 
I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)
 
I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)
 
I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)
 
Asynchronicity: concurrency. A tale of
Asynchronicity: concurrency. A tale ofAsynchronicity: concurrency. A tale of
Asynchronicity: concurrency. A tale of
 
Learning Machine Learning
Learning Machine LearningLearning Machine Learning
Learning Machine Learning
 
WTH is a JWT
WTH is a JWTWTH is a JWT
WTH is a JWT
 
I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)
 
I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)
 
WTH is a JWT
WTH is a JWTWTH is a JWT
WTH is a JWT
 
Asynchonicity: concurrency. A tale of
Asynchonicity: concurrency. A tale ofAsynchonicity: concurrency. A tale of
Asynchonicity: concurrency. A tale of
 
I Don't Care About Security
I Don't Care About Security I Don't Care About Security
I Don't Care About Security
 
I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)
 
I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)
 
Secure your SPA with Auth0
Secure your SPA with Auth0Secure your SPA with Auth0
Secure your SPA with Auth0
 
Learning Machine Learning
Learning Machine LearningLearning Machine Learning
Learning Machine Learning
 
Learning Machine Learning
Learning Machine LearningLearning Machine Learning
Learning Machine Learning
 
Rise of the Nodebots
Rise of the NodebotsRise of the Nodebots
Rise of the Nodebots
 
Let's Get Physical
Let's Get PhysicalLet's Get Physical
Let's Get Physical
 

Recently uploaded

Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵
Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵
Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵
Chandigarh Call girls 9053900678 Call girls in Chandigarh
 
valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
Call Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure
 
VIP Call Girls Himatnagar 7001035870 Whatsapp Number, 24/07 Booking
VIP Call Girls Himatnagar 7001035870 Whatsapp Number, 24/07 BookingVIP Call Girls Himatnagar 7001035870 Whatsapp Number, 24/07 Booking
VIP Call Girls Himatnagar 7001035870 Whatsapp Number, 24/07 Booking
dharasingh5698
 

Recently uploaded (20)

Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵
Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵
Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵
 
Pune Airport ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready...
Pune Airport ( Call Girls ) Pune  6297143586  Hot Model With Sexy Bhabi Ready...Pune Airport ( Call Girls ) Pune  6297143586  Hot Model With Sexy Bhabi Ready...
Pune Airport ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready...
 
(+971568250507 ))# Young Call Girls in Ajman By Pakistani Call Girls in ...
(+971568250507  ))#  Young Call Girls  in Ajman  By Pakistani Call Girls  in ...(+971568250507  ))#  Young Call Girls  in Ajman  By Pakistani Call Girls  in ...
(+971568250507 ))# Young Call Girls in Ajman By Pakistani Call Girls in ...
 
Real Escorts in Al Nahda +971524965298 Dubai Escorts Service
Real Escorts in Al Nahda +971524965298 Dubai Escorts ServiceReal Escorts in Al Nahda +971524965298 Dubai Escorts Service
Real Escorts in Al Nahda +971524965298 Dubai Escorts Service
 
Dubai Call Girls Milky O525547819 Call Girls Dubai Soft Dating
Dubai Call Girls Milky O525547819 Call Girls Dubai Soft DatingDubai Call Girls Milky O525547819 Call Girls Dubai Soft Dating
Dubai Call Girls Milky O525547819 Call Girls Dubai Soft Dating
 
APNIC Updates presented by Paul Wilson at ARIN 53
APNIC Updates presented by Paul Wilson at ARIN 53APNIC Updates presented by Paul Wilson at ARIN 53
APNIC Updates presented by Paul Wilson at ARIN 53
 
Nanded City ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready ...
Nanded City ( Call Girls ) Pune  6297143586  Hot Model With Sexy Bhabi Ready ...Nanded City ( Call Girls ) Pune  6297143586  Hot Model With Sexy Bhabi Ready ...
Nanded City ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready ...
 
Russian Call girl in Ajman +971563133746 Ajman Call girl Service
Russian Call girl in Ajman +971563133746 Ajman Call girl ServiceRussian Call girl in Ajman +971563133746 Ajman Call girl Service
Russian Call girl in Ajman +971563133746 Ajman Call girl Service
 
Shikrapur - Call Girls in Pune Neha 8005736733 | 100% Gennuine High Class Ind...
Shikrapur - Call Girls in Pune Neha 8005736733 | 100% Gennuine High Class Ind...Shikrapur - Call Girls in Pune Neha 8005736733 | 100% Gennuine High Class Ind...
Shikrapur - Call Girls in Pune Neha 8005736733 | 100% Gennuine High Class Ind...
 
Trump Diapers Over Dems t shirts Sweatshirt
Trump Diapers Over Dems t shirts SweatshirtTrump Diapers Over Dems t shirts Sweatshirt
Trump Diapers Over Dems t shirts Sweatshirt
 
Call Girls Ludhiana Just Call 98765-12871 Top Class Call Girl Service Available
Call Girls Ludhiana Just Call 98765-12871 Top Class Call Girl Service AvailableCall Girls Ludhiana Just Call 98765-12871 Top Class Call Girl Service Available
Call Girls Ludhiana Just Call 98765-12871 Top Class Call Girl Service Available
 
WhatsApp 📞 8448380779 ✅Call Girls In Mamura Sector 66 ( Noida)
WhatsApp 📞 8448380779 ✅Call Girls In Mamura Sector 66 ( Noida)WhatsApp 📞 8448380779 ✅Call Girls In Mamura Sector 66 ( Noida)
WhatsApp 📞 8448380779 ✅Call Girls In Mamura Sector 66 ( Noida)
 
valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
 
Katraj ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready For S...
Katraj ( Call Girls ) Pune  6297143586  Hot Model With Sexy Bhabi Ready For S...Katraj ( Call Girls ) Pune  6297143586  Hot Model With Sexy Bhabi Ready For S...
Katraj ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready For S...
 
Call Now ☎ 8264348440 !! Call Girls in Shahpur Jat Escort Service Delhi N.C.R.
Call Now ☎ 8264348440 !! Call Girls in Shahpur Jat Escort Service Delhi N.C.R.Call Now ☎ 8264348440 !! Call Girls in Shahpur Jat Escort Service Delhi N.C.R.
Call Now ☎ 8264348440 !! Call Girls in Shahpur Jat Escort Service Delhi N.C.R.
 
(INDIRA) Call Girl Pune Call Now 8250077686 Pune Escorts 24x7
(INDIRA) Call Girl Pune Call Now 8250077686 Pune Escorts 24x7(INDIRA) Call Girl Pune Call Now 8250077686 Pune Escorts 24x7
(INDIRA) Call Girl Pune Call Now 8250077686 Pune Escorts 24x7
 
VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...
VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...
VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...
 
VIP Call Girls Himatnagar 7001035870 Whatsapp Number, 24/07 Booking
VIP Call Girls Himatnagar 7001035870 Whatsapp Number, 24/07 BookingVIP Call Girls Himatnagar 7001035870 Whatsapp Number, 24/07 Booking
VIP Call Girls Himatnagar 7001035870 Whatsapp Number, 24/07 Booking
 
Real Men Wear Diapers T Shirts sweatshirt
Real Men Wear Diapers T Shirts sweatshirtReal Men Wear Diapers T Shirts sweatshirt
Real Men Wear Diapers T Shirts sweatshirt
 
Top Rated Pune Call Girls Daund ⟟ 6297143586 ⟟ Call Me For Genuine Sex Servi...
Top Rated  Pune Call Girls Daund ⟟ 6297143586 ⟟ Call Me For Genuine Sex Servi...Top Rated  Pune Call Girls Daund ⟟ 6297143586 ⟟ Call Me For Genuine Sex Servi...
Top Rated Pune Call Girls Daund ⟟ 6297143586 ⟟ Call Me For Genuine Sex Servi...
 

Forgot Password? Yes I Did!