

The industry's collective response to this problem has been multi-factor authentication, but implementations are fragmented and many still don't adequately address phishing. Phishing is a massive security issue on the web: most account breaches leverage weak or stolen passwords that are reused across sites. Take a look at the finished web app and try it out.

A way for a user to register a WebAuthn credential.To do so, you'll implement the following:

You'll then add support for two-factor authentication via a security key, based on WebAuthn. You'll start with a basic web application that supports password-based login.
