2FA 2Furious

By Matthew Gilliard

Elevator Pitch

With data breaches making the headlines more and more often and password re-use still common, we have a duty (and often a legal requirement) to implement better security for our users. This talk will explain the types of 2FA and how they are implemented and how they solve our problem.

Description

Every year bring news of more and worse cybersecurity attacks. haveibeenpwned.com now reports on nearly 8 billion compromised accounts, and new hacks take place frighteningly often. As developers we have a responsibility to our users to secure their data in the applications we’re building. You might know that Two-Factor Authentication (2FA) is a tool that can help, but do you really know how it works?

In this talk Matthew will explain the different approaches for implementing 2FA, including some live coding that shows where those 6-digit authentication codes come from and how they are verified. You’ll come away recognizing the need for 2FA, and understanding the different approaches for implementing a solution that’s right for your application. Together we’ll make the web a safer place.