Passkeys: What They Are, Why We Want Them, and How to Use Them

Explore the world of passkeys in this comprehensive video tutorial. Delve into the history of authentication, understand why traditional methods like Authenticator weren't phishing-resistant, and discover the need for protection against social engineering. Learn about passkeys built on PKI and passwordless FIDO2 technology. Understand the authentication flow, including relying parties, clients, and authenticators. Examine the use of public and private keys, user gestures, and the concepts of presence and proximity. Dive into WebAuthn implementation, API calls, and key benefits for protection. Explore cross-device authentication, various authenticator options, and types of passkeys. Discover where passkeys can be used and how they differ from previous methods. Learn about implementing passkeys with Microsoft Entra, including enabling, adding, and using passkeys. Witness demonstrations of same-device and cross-device authentication, and understand how passkeys work with Microsoft accounts. Gain valuable insights into this cutting-edge authentication technology to enhance security in your organization.

- Introduction
- Authentication history
- Why Authenticator wasn't phishing resistant
- Need protection from social engineering
- Passkeys
- Built on PKI
- Passwordless FIDO2
- How this works
- Relying Party
- Client
- Authenticator
- Public and private keys
- Authentication flow
- Need for a user gesture and intent
- Presence and proximity
- The promise of the protocol
- Additional detail
- WebAuthn use
- Relying Party ID
- WebAuthn client checks
- Javascript and API calls
- Key benefits for protection
- Presence and CTAP
- Bluetooth use
- Cross-device authentication
- How many passkeys
- Authenticator options
- Types of passkey
- Authenticator can roam
- Where can passkeys be used
- What is different from before
- Using with Entra
- Enabling passkeys in Entra
- User passkey addition
- Using a passkey
- Using passkey on same device
- Cross-device authentication
- Microsoft accounts
- Always synced
- MSA passkey CDA demo
- Summary
- Close