This talk was recorded at NDC London in London, England. #ndclondon  #ndcconferences #developer #softwaredeveloper    

Attend the next NDC conference near you: 
https://ndcconferences.com
https://ndclondon.com/

Subscribe to our YouTube channel and learn every day:   
/        @NDC 

Follow our Social Media!

https://www.facebook.com/ndcconferences
https://twitter.com/NDC_Conferences
https://www.instagram.com/ndc_conferences/

#dotnet #security #aspdotnetcore 

Passkeys, using the WebAuthn protocol, replace passwords with stronger, simpler, and phishing-resistant authentication using your device's built-in security or a dedicated hardware key.

This session provides a practical introduction to passkey authentication and its implementation in ASP.NET Core applications. We'll explore the fundamentals of passkeys and the underlying public key cryptography. Then, we'll demonstrate how to integrate passkey authentication into your projects, supporting OS management, password managers (like 1Password), and hardware security keys (like a Yubikey).

Join this talk if you want to get a thorough understanding of passkeys and the skills to integrate them into your applications.

NDC Conferences

A conference talk transcript covering passwordless authentication using passkeys in ASP.NET Core. It explains the problems with traditional passwords and MFA, then walks through the cryptographic foundations of passkeys (public/private key pairs, phishing resistance, session replay prevention), and the FIDO Alliance standards behind them. The talk demonstrates the built-in passkey support in .NET 10's Blazer template with ASP.NET Core Identity, showing registration and login flows, the navigator.credentials API, and how challenge state is stored in cookies. Deployment considerations include domain/origin binding, subdomain handling, multi-domain setups, recovery strategies, and the well-known passkey endpoints for password manager integration.

Going Passwordless - A Practical Guide to Passkeys in ASP.NET Core - Maarten Balliauw