The University of North Carolina at Chapel Hill is on its way toward having passwordless logins. Seven months ago, the university launched a pilot to test its implementation of WebAuthn, known locally as Carolina Key.
For our Oct. 19 IAM Online webinar, software engineer Tariq Wilson will discuss the design of and key decisions made during the development process. We asked him to give us a preview of his upcoming presentation.
Q: What do you hope attendees will learn from your presentation?
A: I hope they will learn some of the things that we have gotten right and will help them stay on the happy path.
Q: Why is this an important topic to cover?
A: Users dislike passwords, and hackers love them. There has to be a better way.
Q: What served as the university’s impetus for implementing WebAuthn?
A: We were motivated by an increase in phishing attacks.
Q: What advice/suggestions would you offer to other institutions considering implementing WebAuthn?
A: Start with the open source project offered by Duke. It was a life saver.