Curious to know why aren't devs implementing WebAuthn for their sign-up & login flow
I'v always wondered why companies aren't investing in going passwordless and in particular implementing WebAuthn(https://webauthn.io/) into their websites?
Something like Magic Link + WebAuthn sounds like such a great user experience. This way a user does not have to keep going back to their email and biometrics is getting more and more common each day!
This could literally help replace passwords.
There are many people whose devices don't support biometrics. That's why I won't use it. Email and password works fine most of the time.
But almost all phones now have biometrics and it feels like in the next 2 years almost all laptops would have biometrics.
But yes, if it's a desktop then it might not work.
Because finger Biometrics are highly personal things and used as identification proof in highly secured personal things like Bank account and Citizenship documents.
Conversion these days are hard to get and I don't to kill my business by adding biometrics and sounding sketchy to users.
Imagine a company getting hacked and loosing biometrics of millions of people with names And fingerprint.
I think users privacy should be first step these days in starting a company.
This is why I'm promoting privacy friendly analytics tool AppMetrix
Hey there, thanks for the reply but I think you misunderstood what WebAuthn does.
It’s device local biometrics & your data will not be stored on the cloud or any server. Even if you get hacked your biometrics information doesn’t go in the wrong hands as it was always on the local device. Just like how Apple does FaceID! Hence was asking why a company wouldn’t do it as users already have it on their devices
Hi this is what I'm trying to solve with https://neologin.co. It's a passwordless user auth service based on Stripe. The whole premise is that auth is a lot of work to implement even with a bunch of tools and libraries to help there's still a lot of plumbing you need to do on your end. That's what I'm trying to tackle with Neologin.
Using stripe for passwordless auth? Even though that sounds really Interesting wouldn’t that require more work than just using a normal auth provider? You’d still run into the issue of managing users & all right? Because Stripe stores different information & using that for signup & login seems odd 😓 unless I’m missing something.
For example, my co-founders & I are working on www.ezid.io & our aim is to get auth up & running in under 10 minutes. We’re launching in 6 weeks & we are starting off with Magic Links + WebAuthn as our initial feature set
Right, how you manage users is up to you. Neologin will just facilitate the process and will act more like a middle layer. Neologin aims to solve specific pain points that I have in my own products and that I think could be useful to other indie hackers as well.
Not sure what it is - but I tried the demo and it asks me to insert some USB stick. I don't have it - and I don't know where to get it.
Oh that would mean your laptop doesn’t support biometrics such like TouchID or FaceID.
Could you try it with your phone through a chrome browser? That works a quite well!