Tim Cappalli

Another session on passkeys? Well we’re entering year four, and passkeys are available to billions of users. However, widespread availability hasn’t necessarily led to widespread understanding. From concerns about workforce suitability to fears of biometric theft and vendor lock-in, the same old myths are evolving into new misunderstandings. This session revisits the passkey landscape to address the questions that remain after another year of massive growth. We’ll tackle myths regarding sync fabrics, workforce usage, credential manager portability, and more. This session will provide a reality check on what passkeys actually do, what they don’t, which capabilities are available for different use cases, and how to separate marketing hype and sensationalist headlines from facts.

Passkeys are the future of authentication, but using them for data encryption is a disaster waiting to happen. Overloading these credentials creates a dangerous blast radius that can lead to the irreversible loss of a user’s most sacred memories and documents.

A guide for configuring Home Assistant so you can change the color and/or brightness of only the lights which are currently turned on.

A presentation at the European Union Digital Identity Wallet launchpad event in December 2025 which covers the Digital Credentials API and how it bridges the gap between verifiers, issuers, and wallets. The session focuses on what a good API must deliver: format neutrality, cross-platform compatibility, clear user prompts/consent, proximity and remote flows, and graceful fallback.

A session at Authenticate 2025 which explores the nuanced dynamics between passkeys and verifiable digital credentials, and their technological foundations across usability, privacy, trust models, and ecosystems with the goal of answering whether passkeys and verifiable digital credentials are friends or foes—and how these technologies might collaboratively shape the future of secure, user-centric digital identity systems.

Passkeys promise to replace passwords with a simpler, more secure login experience, but myths and confusion still hold many organizations back. This session at Authenticate 2025 tackles some commonly heard questions and misconceptions about passkeys and breaks down the facts in clear, practical terms. You’ll walk away with a solid understanding of what passkeys really solve, what they don’t, and how to approach adoption with confidence.