--- title: "#webauthn articles | Hashnode" description: "Explore 47 articles tagged #webauthn on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/webauthn" --- Tag # #webauthn 47 posts · 4 followers [Roland Mweze](https://hashnode.com/@rolandm) · [Oct 27](https://hashnode.com/posts/how-to-build-passkey-authentication-with-webauthn-next-js-and-nestjs/6ae0e2ec42a07b949a9f1206) ### [How to Build Passkey Authentication with WebAuthn, Next.js and NestJS](https://freecodecamp.org/news/how-to-build-passkey-authentication-with-webauthn-next-js-and-nestjs?utm_source=hashnode&utm_medium=feed) Passwords are a pain for both users and service providers․ Users often find it difficult to remember passwords, and the risk of phishing and password reuse across multiple websites is high. Developers 33 min read · [freecodecamp.org](https://freecodecamp.org/news/how-to-build-passkey-authentication-with-webauthn-next-js-and-nestjs?utm_source=hashnode&utm_medium=feed) [Jaden Vo](https://hashnode.com/@jadenvo259) · [Oct 24](https://hashnode.com/posts/how-passkeys-work-for-web-developers-a-walkthrough-of-the-webauthn-sign-in-flow/6adc028ddf2648d6479a80fc) ### [How Passkeys Work for Web Developers: A Walkthrough of the WebAuthn Sign-in Flow](https://jadenvo259.hashnode.dev/how-passkeys-work-for-web-developers-a-walkthrough-of-the-webauthn-sign-in-flow?utm_source=hashnode&utm_medium=feed) Google, Apple, Microsoft, Amazon, GitHub and plenty of banks now offer passkeys. If you build login flows, the security model underneath is very different from passwords, and it's worth understanding 4 min read · [jadenvo259.hashnode.dev](https://jadenvo259.hashnode.dev/how-passkeys-work-for-web-developers-a-walkthrough-of-the-webauthn-sign-in-flow?utm_source=hashnode&utm_medium=feed) [ZyVOP](https://hashnode.com/@zyvop) · [Oct 19](https://hashnode.com/posts/passkeys-in-node-js-add-passwordless-login-to-an-express-app-z90vn/6ad5fd9147fc61c2dd31d33f) ### [Passkeys in Node.js: Add Passwordless Login to an Express App](https://blog.zyvop.com/passkeys-in-node-js-add-passwordless-login-to-an-express-app-z90vn?utm_source=hashnode&utm_medium=feed) Build passkey registration, usernameless login, and browser autofill with SimpleWebAuthn, plus the security checks most tutorials skip. 22 min read · [blog.zyvop.com](https://blog.zyvop.com/passkeys-in-node-js-add-passwordless-login-to-an-express-app-z90vn?utm_source=hashnode&utm_medium=feed) [ZyVOP](https://hashnode.com/@zyvop) · [Sep 3](https://hashnode.com/posts/implementing-passkey-authentication-in-nestjs-and-postgresql/6a98f674843bd66e49414fb5) ### [Implementing Passkey Authentication in NestJS and PostgreSQL](https://blog.zyvop.com/implementing-passkey-authentication-in-nestjs-and-postgresql?utm_source=hashnode&utm_medium=feed) A practical, code-first guide to adding WebAuthn passkey registration and login to NestJS with PostgreSQL, covering credential storage, challenge handling, security, and production hardening. 13 min read · [blog.zyvop.com](https://blog.zyvop.com/implementing-passkey-authentication-in-nestjs-and-postgresql?utm_source=hashnode&utm_medium=feed) [Hussain Fakhruddin](https://hashnode.com/@hussainanjar) · [Aug 10](https://hashnode.com/posts/passkeys-mena-apps-recovery-first/6a79b3aa186073ec9f10d6f3) ### [Passkeys for MENA Apps: Build the Recovery Path First](https://www.sultanbyte.com/passkeys-mena-apps-recovery-first?utm_source=hashnode&utm_medium=feed) Passkeys remove a common phishing target, but a weak reset flow can undo the security gain. Start with recovery, then add credentials without locking users out. 9 min read · [sultanbyte.com](https://www.sultanbyte.com/passkeys-mena-apps-recovery-first?utm_source=hashnode&utm_medium=feed) [Manu Shukla](https://hashnode.com/@mr-manushukla) · [Jul 30](https://hashnode.com/posts/passkeys-in-india-2026-add-webauthn-login-to-ios-and-android-apps/6a6bd6357de9fff601efb994) ### [Passkeys in India (2026): add WebAuthn login to iOS and Android apps](https://ecorpit.hashnode.dev/passkeys-in-india-2026-add-webauthn-login-to-ios-and-android-apps?utm_source=hashnode&utm_medium=feed) Passkeys in India (2026): add WebAuthn login to iOS and Android apps Summary. Visa Payment Passkey went live in India on 2 July 2026 with IDFC FIRST Bank as the first issuing bank, and it is already u 16 min read · [ecorpit.hashnode.dev](https://ecorpit.hashnode.dev/passkeys-in-india-2026-add-webauthn-login-to-ios-and-android-apps?utm_source=hashnode&utm_medium=feed) [Maria Kinyanta](https://hashnode.com/@maria-kinyanta) · [Jul 11](https://hashnode.com/posts/fido2-and-webauthn-how-hardware-turns-authentication-into-a-cryptographic-proof/6a52a6b9ca34888e0d087dab) ### [FIDO2 and WebAuthn: How Hardware Turns Authentication Into a Cryptographic Proof](https://emkaylabs.hashnode.dev/fido2-and-webauthn-how-hardware-turns-authentication-into-a-cryptographic-proof?utm_source=hashnode&utm_medium=feed) Learn how FIDO2 and WebAuthn use hardware-backed cryptography to replace passwords with secure authentication and privacy by design 5 min read · [emkaylabs.hashnode.dev](https://emkaylabs.hashnode.dev/fido2-and-webauthn-how-hardware-turns-authentication-into-a-cryptographic-proof?utm_source=hashnode&utm_medium=feed) [Kishore K Sharma](https://hashnode.com/@kishoreksharma) · [Jul 8](https://hashnode.com/posts/passkeys-explained-why-passwords-are-becoming-obsolete/6a4e8b1d255352cf32090536) ### [Passkeys Explained: Why Passwords Are Becoming Obsolete](https://blogs.kishorek.dev/passkeys-explained-why-passwords-are-becoming-obsolete?utm_source=hashnode&utm_medium=feed) A password is a secret you have to share, then keep secret from everyone you shared it with. Passkeys retire that contradiction: your device keeps a private key, the server keeps a useless public one, and phishing stops working. 9 min read · [blogs.kishorek.dev](https://blogs.kishorek.dev/passkeys-explained-why-passwords-are-becoming-obsolete?utm_source=hashnode&utm_medium=feed) [Moksh Gupta](https://hashnode.com/@Moksh45) · [Jun 20](https://hashnode.com/posts/passkeys-in-2026-a-practical-engineering-guide-to-passwordless-auth/6a3633a6dd09eb4dcac87902) ### [Passkeys in 2026: A Practical Engineering Guide to Passwordless Auth](https://moksh45.hashnode.dev/passkeys-in-2026-a-practical-engineering-guide-to-passwordless-auth?utm_source=hashnode&utm_medium=feed) Authentication is broken at its foundation - not just inconvenient. Passwords are shared secrets: hand one to a server, and you have instantly doubled your attack surface. With over 5 billion passkeys 5 min read · [moksh45.hashnode.dev](https://moksh45.hashnode.dev/passkeys-in-2026-a-practical-engineering-guide-to-passwordless-auth?utm_source=hashnode&utm_medium=feed) [Alan West](https://hashnode.com/@alanwest) · [May 11](https://hashnode.com/posts/how-to-handle-hardware-attestation-without-locking-out-real-users/6a011d31e38f5f9e6f0b02bd) ### [How to handle hardware attestation without locking out real users](https://alan-west.hashnode.dev/how-to-handle-hardware-attestation-without-locking-out-real-users?utm_source=hashnode&utm_medium=feed) Hardware attestation locks out legitimate users when treated as a binary check. Here's how to build a tiered trust model that actually works. 6 min read · [alan-west.hashnode.dev](https://alan-west.hashnode.dev/how-to-handle-hardware-attestation-without-locking-out-real-users?utm_source=hashnode&utm_medium=feed)