Passwordless & Phishing-Resistant Authentication

Research question

When passwords disappear, what security and usability problems remain—and what new ones emerge?

This research examines FIDO2, WebAuthn, security keys, cryptographic authenticators, and other approaches that reduce reliance on memorized secrets. It considers phishing resistance, authenticator limitations, enrollment, recovery, device loss, service identity, and the information presented to users during authentication. Passwordless authentication is evaluated as a complete security workflow rather than simply a replacement for the password field.