PasswordsCon·21 min
Aldo Salas
Explores how account recovery and identity verification must change once an organization removes passwords in favor of passkeys.
identityprivacytrust+1
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 342 talks in the archive.
1–2 of 2 talks
PasswordsCon·21 min
Aldo Salas
Explores how account recovery and identity verification must change once an organization removes passwords in favor of passkeys.
PasswordsCon·34 min
Aldo Salas
Shows how flaws in passwordless WebAuthn logins can enable account takeover, plus fixes for developers and testers.