SlideShare a Scribd company logo
1 of 61
Download to read offline
FORGOT PASSWORD? YES I
DID!
AN INTRO TO PASSWORDLESS AUTHENTICATION
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
ABOUT ME
@joel__lord
joellord
PASSWORDS
ARE BAD
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
PASSWORDS ARE BAD
▸ Help desk costs
▸ Technology acquisition costs
▸ Management and operations costs
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
PASSWORDS ARE BAD
▸ 2,6G data records compromised in
2017
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
PASSWORDS ARE BAD
▸ 2,6G data records compromised in
2017
▸ https://breachlevelindex.com
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
PASSWORDS ARE BAD
▸ More computing power === easier
cracking
▸ More social media presence ===
easier social engineering
▸ Users will always be your weakest
link
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
PASSWORDS ARE BAD
▸ 23% of users admit having only
one password
▸ More than 60% of users use at
least two devices everyday
▸ We all hate passwords!
@joel__lord
#BocaJS
@joel__lord
#BocaJS
@joel__lord
#BocaJS
@joel__lord
#BocaJS
WHAT CAN YOU
DO?
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
WHAT CAN WE DO?
▸ Use best practices
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
OAUTH - IMPLICIT FLOW
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
OAUTH - IMPLICIT FLOW
⛔
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
OAUTH - IMPLICIT FLOW
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
OAUTH - IMPLICIT FLOW
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
OAUTH - IMPLICIT FLOW
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
OAUTH - IMPLICIT FLOW
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
OAUTH - IMPLICIT FLOW
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
OAUTH - IMPLICIT FLOW
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
WHAT CAN WE DO?
▸ Use best practices
▸ Delegate
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
WHAT CAN WE DO?
▸ Use best practices
▸ Delegate
▸ MFA
FORGET PASSWORDS
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
FORGET PASSWORDS
▸ Avoid reusing passwords
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
FORGET PASSWORDS
▸ Avoid reusing passwords
▸ Use a password manager
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
ALTERNATIVES
▸ WebAuthn
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
ALTERNATIVES
▸ WebAuthn
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
ALTERNATIVES
▸ WebAuthn
DEAR DEMO GODS,
PLEASE LET THIS WORK
WEBAUTHN DEMO
Demo src: https://webauthn.me/
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
ALTERNATIVES
▸ WebAuthn
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
ALTERNATIVES
▸ WebAuthn
▸ Biometrics
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
BIOMETRICS
https://www.microsoft.com/en-us/research/wp-content/uploads/2008/10/ECCV_CAT_PROC.pdf
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
BIOMETRICS
https://www.microsoft.com/en-us/research/wp-content/uploads/2008/10/ECCV_CAT_PROC.pdf
DEAR DEMO GODS,
PLEASE LET THIS WORK
BIOMETRICS DEMO
Demo src: https://voiceit.io/
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
ALTERNATIVES
▸ WebAuthn
▸ Biometrics
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
ALTERNATIVES
▸ WebAuthn
▸ Biometrics
▸ Magic Links
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
ALTERNATIVES
▸ WebAuthn
▸ Biometrics
▸ Magic Links
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
MAGIC LINKS (POST /AUTHORIZE)
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
MAGIC LINKS (POST /AUTHORIZE)
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
MAGIC LINKS (POST /AUTHORIZE)
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
MAGIC LINKS (POST /AUTHORIZE)
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
MAGIC LINKS (POST /AUTHORIZE)
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
MAGIC LINKS (GET /LOGIN/{MAGICLINK})
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
MAGIC LINKS (GET /LOGIN/{MAGICLINK})
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
MAGIC LINKS (GET /LOGIN/{MAGICLINK})
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
MAGIC LINKS (GET /LOGIN/{MAGICLINK})
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
MAGIC LINKS (GET /LOGIN/{MAGICLINK})
DEAR DEMO GODS,
PLEASE LET THIS WORK
MAGIC LINK DEMO
Demo src: https://github.com/joellord/secure-spa-auth0/
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
ALTERNATIVES
▸ Yubikeys
▸ Biometrics
▸ Magic Links
FUTURE OF IDENTITY
MANAGEMENT
@joel__lord
#BocaJS
FORGOT PASSWORD? YES I DID!
RESOURCES
▸ OAuth & Open ID Connect
▸ http://bit.ly/oauth-talk
▸ JWTs
▸ https://jwt.io
▸ WebAuthn
▸ http://bit.ly/webauthn-demo
▸ VoiceIt integration with Auth0
▸ http://bit.ly/auth0-voiceit
@joel__lord
joellord
FORGOT PASSWORD? YES I DID!
BocaJS
March 5th, 2019
THANK YOU !
TEXT
TEXT

More Related Content

Similar to Forgot Password? Yes I Did!

Similar to Forgot Password? Yes I Did! (6)

Forgot Password? Yes I Did!
Forgot Password? Yes I Did!Forgot Password? Yes I Did!
Forgot Password? Yes I Did!
 
SEO for WordPress
SEO for WordPressSEO for WordPress
SEO for WordPress
 
Codemotion Berlin 2018 - AI with a devops mindset: experimentation, sharing a...
Codemotion Berlin 2018 - AI with a devops mindset: experimentation, sharing a...Codemotion Berlin 2018 - AI with a devops mindset: experimentation, sharing a...
Codemotion Berlin 2018 - AI with a devops mindset: experimentation, sharing a...
 
Thiago de Faria - AI with a devops mindset - experimentation, sharing and eas...
Thiago de Faria - AI with a devops mindset - experimentation, sharing and eas...Thiago de Faria - AI with a devops mindset - experimentation, sharing and eas...
Thiago de Faria - AI with a devops mindset - experimentation, sharing and eas...
 
Data driven devops as presented at Codemash 2018
Data driven devops as presented at Codemash 2018Data driven devops as presented at Codemash 2018
Data driven devops as presented at Codemash 2018
 
Dawn Anderson SEO Consumer Choice Crawl Budget Optimization Conflicts
Dawn Anderson SEO Consumer Choice Crawl Budget Optimization ConflictsDawn Anderson SEO Consumer Choice Crawl Budget Optimization Conflicts
Dawn Anderson SEO Consumer Choice Crawl Budget Optimization Conflicts
 

More from Joel Lord

More from Joel Lord (20)

From Ceasar Cipher To Quantum Cryptography
From Ceasar Cipher To Quantum CryptographyFrom Ceasar Cipher To Quantum Cryptography
From Ceasar Cipher To Quantum Cryptography
 
I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)
 
I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)
 
I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)
 
I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)
 
Asynchronicity: concurrency. A tale of
Asynchronicity: concurrency. A tale ofAsynchronicity: concurrency. A tale of
Asynchronicity: concurrency. A tale of
 
Learning Machine Learning
Learning Machine LearningLearning Machine Learning
Learning Machine Learning
 
WTH is a JWT
WTH is a JWTWTH is a JWT
WTH is a JWT
 
I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)
 
I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)
 
WTH is a JWT
WTH is a JWTWTH is a JWT
WTH is a JWT
 
Asynchonicity: concurrency. A tale of
Asynchonicity: concurrency. A tale ofAsynchonicity: concurrency. A tale of
Asynchonicity: concurrency. A tale of
 
I Don't Care About Security
I Don't Care About Security I Don't Care About Security
I Don't Care About Security
 
I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)
 
I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)I Don't Care About Security (And Neither Should You)
I Don't Care About Security (And Neither Should You)
 
Secure your SPA with Auth0
Secure your SPA with Auth0Secure your SPA with Auth0
Secure your SPA with Auth0
 
Learning Machine Learning
Learning Machine LearningLearning Machine Learning
Learning Machine Learning
 
Learning Machine Learning
Learning Machine LearningLearning Machine Learning
Learning Machine Learning
 
Rise of the Nodebots
Rise of the NodebotsRise of the Nodebots
Rise of the Nodebots
 
Let's Get Physical
Let's Get PhysicalLet's Get Physical
Let's Get Physical
 

Recently uploaded

Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵
Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵
Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵
Chandigarh Call girls 9053900678 Call girls in Chandigarh
 
VIP Call Girls Pollachi 7001035870 Whatsapp Number, 24/07 Booking
VIP Call Girls Pollachi 7001035870 Whatsapp Number, 24/07 BookingVIP Call Girls Pollachi 7001035870 Whatsapp Number, 24/07 Booking
VIP Call Girls Pollachi 7001035870 Whatsapp Number, 24/07 Booking
dharasingh5698
 
💚😋 Salem Escort Service Call Girls, 9352852248 ₹5000 To 25K With AC💚😋
💚😋 Salem Escort Service Call Girls, 9352852248 ₹5000 To 25K With AC💚😋💚😋 Salem Escort Service Call Girls, 9352852248 ₹5000 To 25K With AC💚😋
💚😋 Salem Escort Service Call Girls, 9352852248 ₹5000 To 25K With AC💚😋
nirzagarg
 
➥🔝 7737669865 🔝▻ mehsana Call-girls in Women Seeking Men 🔝mehsana🔝 Escorts...
➥🔝 7737669865 🔝▻ mehsana Call-girls in Women Seeking Men  🔝mehsana🔝   Escorts...➥🔝 7737669865 🔝▻ mehsana Call-girls in Women Seeking Men  🔝mehsana🔝   Escorts...
➥🔝 7737669865 🔝▻ mehsana Call-girls in Women Seeking Men 🔝mehsana🔝 Escorts...
nirzagarg
 
Call Girls in Prashant Vihar, Delhi 💯 Call Us 🔝9953056974 🔝 Escort Service
Call Girls in Prashant Vihar, Delhi 💯 Call Us 🔝9953056974 🔝 Escort ServiceCall Girls in Prashant Vihar, Delhi 💯 Call Us 🔝9953056974 🔝 Escort Service
Call Girls in Prashant Vihar, Delhi 💯 Call Us 🔝9953056974 🔝 Escort Service
9953056974 Low Rate Call Girls In Saket, Delhi NCR
 
Thalassery Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call G...
Thalassery Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call G...Thalassery Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call G...
Thalassery Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call G...
Call Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure
 

Recently uploaded (20)

APNIC Updates presented by Paul Wilson at ARIN 53
APNIC Updates presented by Paul Wilson at ARIN 53APNIC Updates presented by Paul Wilson at ARIN 53
APNIC Updates presented by Paul Wilson at ARIN 53
 
(INDIRA) Call Girl Pune Call Now 8250077686 Pune Escorts 24x7
(INDIRA) Call Girl Pune Call Now 8250077686 Pune Escorts 24x7(INDIRA) Call Girl Pune Call Now 8250077686 Pune Escorts 24x7
(INDIRA) Call Girl Pune Call Now 8250077686 Pune Escorts 24x7
 
Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵
Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵
Low Sexy Call Girls In Mohali 9053900678 🥵Have Save And Good Place 🥵
 
20240510 QFM016 Irresponsible AI Reading List April 2024.pdf
20240510 QFM016 Irresponsible AI Reading List April 2024.pdf20240510 QFM016 Irresponsible AI Reading List April 2024.pdf
20240510 QFM016 Irresponsible AI Reading List April 2024.pdf
 
Dubai=Desi Dubai Call Girls O525547819 Outdoor Call Girls Dubai
Dubai=Desi Dubai Call Girls O525547819 Outdoor Call Girls DubaiDubai=Desi Dubai Call Girls O525547819 Outdoor Call Girls Dubai
Dubai=Desi Dubai Call Girls O525547819 Outdoor Call Girls Dubai
 
VIP Call Girls Pollachi 7001035870 Whatsapp Number, 24/07 Booking
VIP Call Girls Pollachi 7001035870 Whatsapp Number, 24/07 BookingVIP Call Girls Pollachi 7001035870 Whatsapp Number, 24/07 Booking
VIP Call Girls Pollachi 7001035870 Whatsapp Number, 24/07 Booking
 
Trump Diapers Over Dems t shirts Sweatshirt
Trump Diapers Over Dems t shirts SweatshirtTrump Diapers Over Dems t shirts Sweatshirt
Trump Diapers Over Dems t shirts Sweatshirt
 
💚😋 Salem Escort Service Call Girls, 9352852248 ₹5000 To 25K With AC💚😋
💚😋 Salem Escort Service Call Girls, 9352852248 ₹5000 To 25K With AC💚😋💚😋 Salem Escort Service Call Girls, 9352852248 ₹5000 To 25K With AC💚😋
💚😋 Salem Escort Service Call Girls, 9352852248 ₹5000 To 25K With AC💚😋
 
➥🔝 7737669865 🔝▻ mehsana Call-girls in Women Seeking Men 🔝mehsana🔝 Escorts...
➥🔝 7737669865 🔝▻ mehsana Call-girls in Women Seeking Men  🔝mehsana🔝   Escorts...➥🔝 7737669865 🔝▻ mehsana Call-girls in Women Seeking Men  🔝mehsana🔝   Escorts...
➥🔝 7737669865 🔝▻ mehsana Call-girls in Women Seeking Men 🔝mehsana🔝 Escorts...
 
best call girls in Hyderabad Finest Escorts Service 📞 9352988975 📞 Available ...
best call girls in Hyderabad Finest Escorts Service 📞 9352988975 📞 Available ...best call girls in Hyderabad Finest Escorts Service 📞 9352988975 📞 Available ...
best call girls in Hyderabad Finest Escorts Service 📞 9352988975 📞 Available ...
 
Sarola * Female Escorts Service in Pune | 8005736733 Independent Escorts & Da...
Sarola * Female Escorts Service in Pune | 8005736733 Independent Escorts & Da...Sarola * Female Escorts Service in Pune | 8005736733 Independent Escorts & Da...
Sarola * Female Escorts Service in Pune | 8005736733 Independent Escorts & Da...
 
VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting High Prof...
VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting  High Prof...VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting  High Prof...
VIP Model Call Girls Hadapsar ( Pune ) Call ON 9905417584 Starting High Prof...
 
Call Girls Ludhiana Just Call 98765-12871 Top Class Call Girl Service Available
Call Girls Ludhiana Just Call 98765-12871 Top Class Call Girl Service AvailableCall Girls Ludhiana Just Call 98765-12871 Top Class Call Girl Service Available
Call Girls Ludhiana Just Call 98765-12871 Top Class Call Girl Service Available
 
2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs
2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs
2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs
 
𓀤Call On 7877925207 𓀤 Ahmedguda Call Girls Hot Model With Sexy Bhabi Ready Fo...
𓀤Call On 7877925207 𓀤 Ahmedguda Call Girls Hot Model With Sexy Bhabi Ready Fo...𓀤Call On 7877925207 𓀤 Ahmedguda Call Girls Hot Model With Sexy Bhabi Ready Fo...
𓀤Call On 7877925207 𓀤 Ahmedguda Call Girls Hot Model With Sexy Bhabi Ready Fo...
 
20240507 QFM013 Machine Intelligence Reading List April 2024.pdf
20240507 QFM013 Machine Intelligence Reading List April 2024.pdf20240507 QFM013 Machine Intelligence Reading List April 2024.pdf
20240507 QFM013 Machine Intelligence Reading List April 2024.pdf
 
Shikrapur - Call Girls in Pune Neha 8005736733 | 100% Gennuine High Class Ind...
Shikrapur - Call Girls in Pune Neha 8005736733 | 100% Gennuine High Class Ind...Shikrapur - Call Girls in Pune Neha 8005736733 | 100% Gennuine High Class Ind...
Shikrapur - Call Girls in Pune Neha 8005736733 | 100% Gennuine High Class Ind...
 
VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...
VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...
VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...
 
Call Girls in Prashant Vihar, Delhi 💯 Call Us 🔝9953056974 🔝 Escort Service
Call Girls in Prashant Vihar, Delhi 💯 Call Us 🔝9953056974 🔝 Escort ServiceCall Girls in Prashant Vihar, Delhi 💯 Call Us 🔝9953056974 🔝 Escort Service
Call Girls in Prashant Vihar, Delhi 💯 Call Us 🔝9953056974 🔝 Escort Service
 
Thalassery Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call G...
Thalassery Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call G...Thalassery Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call G...
Thalassery Escorts Service ☎️ 6378878445 ( Sakshi Sinha ) High Profile Call G...
 

Forgot Password? Yes I Did!