Passwordless.ID News & Articles
Hello folks, I'm pleased to announce the release of the v2.0 of my WebAuthn library! This library greatly simplifies the usage of passkeys by invoking the WebAuthn protocol more conveniently. It is open source, opinionated, dependency-free and minim...
The WebAuthn protocol is more than 200 pages long, it's complex and gets constantly tweaked. Moreover, the reality of browsers and authenticators have their own quirks and deviate from the official RFC. As such, all information on the web should be t...
The situation Passwordless.ID isn't progressing lately. While I would love to have Passwordless.ID already done and wrapped up, it's still far from it. The reason: lack of time, lack of resources. It's a personal project. It's not some big company ...
Hello folks! Since I have little time to cater about Passwordless.ID lately, I wanted to at publish some little update. So here we go, the WebAuthn library (to enable passwordless login using passkeys) now also delivers more information about the "au...
What I like about the banner picture above is that it is a very useful analogy to our problem at hand. A database is nothing else than a glorified electronic version of it. Lots of small storage boxes containing some data, and identified by a label o...
Refactoring is a necessary thing. The reasons are numerous, but most of them have one thing in common: they are underestimated. As the old adage says: "the devil lies in the details". And typically these "details" surface during refactoring itself, l...
What may look ideal in theory, may turn out cumbersome in practice. -- Myself During inception, the Passwordless.ID "app" was built in the purest form of a three-tier architecture. The UI - A vue app "compiled" into a single-page-application The A...
Currently, the registration procedure at Passwordless.ID had three steps: Register your device with biometrics/PIN Select your portrait. Fill in the profile information. View your profile and continue. The second step, the portrait selection, w...
This minimal example shows an integration between FastAPI and Passwordless.ID. Source code: https://github.com/passwordless-id/fast-api-demo Running it To run it: uvicorn main:app And open http://localhost:8000/docs For authentication, you can choos...
This minimalistic repository shows how to use Passwordless.ID to authenticate users. Demo source code: https://github.com/passwordless-id/spring-boot-demo Dependencies Spring Boot already has everything needed built-in for OpenID authentication. Th...
Beware, technical article ahead! OAuth 2 and OpenID are complex protocols. It's full of tiny details that are there for the sake of security and it's not always clear why some checks are necessary. This article is about such a detail. Prelude Before...
I'll start this blog entry with a question I received in the Discord chat last week. I would like to automatically log out the current user if there is no activity for x time. Haven't thought of the implementation, but is there an API for that? Bef...
I try to post something each week, but it isn't always easy. This week was calm. Currently, Passwordless.ID is at the MVP stage (Minimal Viable Product), or the rather the beta version of it. It still has some rough edges. However, it works. That is ...
In case you heard about Passkeys and WebAuthn, you might wonder what are the differences, or their relationship. This article tries to clarify what both are and shares some personal opinions about the implications of Passkeys. What is WebAuthn? WebAu...
Passwordless.ID is a free public identity provider allowing users to sign in/up in web apps using their fingerprint, face recognition or local authentication mechanisms like swipe pattern or PIN code. The results are no more passwords, a much smoothe...
According to our roadmap, e-mail verification and account recovery is now available. At least, the fundamental parts. A verification e-mail is automatically when the user sets or updates it in the profile. Thanks to a verified e-mail, it can also be...
Passwordless.ID is a free public identity provider allowing users to sign in/up in web apps using their fingerprint, face recognition or local authentication mechanisms like swipe pattern or PIN code. The results are no more passwords, a much smoothe...
Passwordless authentication using your phone's fingerprint sensor, or face recognition using your webcam is now possible in the browser thanks to the WebAuthn protocol. It is not only more comfortable for users but also more secure since it is two-fa...
Introduction Web authentication through local device authentication like Android Touch ID, Windows Hello Face recognition or just a local device PIN code. This is now available for Browsers and offers not only a smoother user experience but is also m...
Demo Can registration/authentication be both smoother and more secure? Yes, it can! Without any password. This is sometimes called "webauthn", or "passkeys", or "passwordless authentication". It relies on the local platform authentication (using fing...