An example website that implements email code sign-in and passkeys following best practices.
Magic Links Have Rough Edges, but Passkeys Can Smooth Them Over
Magic links, those emailed one-time login links, are annoying and inconvenient for folks who use a password manager, but they radically accept some fundamental truths about signing in for everyone else. By layering passkeys on top of magic links, websites can provide a seamless authentication experience for all users.
Pilcrow's auth book
Pilcrow's collection of guides, recommendations, and examples for implementing auth in web applications.
Passkeys.directory
A community-driven index of websites, apps, and services that offer signing in with passkeys.
Keycloak
Keycloak - the open source identity and access management solution. Add single-sign-on and authentication to applications and secure services with minimum effort.
What is EVP? Bridging the remaining gap in the passkey era
How the Email Verification Protocol (EVP) solves passkey fallback and account recovery challenges by bringing phishing resistance to email verification without...
New authentication flow for Sill - Euphonos
Sill no longer requires an email for signup
OAuth API - Home
The Apigee OAuth API gives you a keychain for authenticating to Twitter, Salesforce, Salesforce Chatter, Facebook, Flickr, and Foursquare. Thousands of developers complain about the complexity of using OAuth. Now you can easily authenticate in one consistent way across several APIs and build apps faster.
pond ●
Enter the email address associated with your account and we'll send you a sign-in code.
OAuth — The Open Standard for Authorization
The open standard for authorization on the web. Find what you need:
SMM Tools • App Password or Oauth for Bluesky? - Hilary's Leaflet
Some work needs to be done before App Passwords can even remotely be retired. Make that a lot of work - none of these multi-platform tools have implemented it OR the two that did have not implemented Oauth for different PDSs.
Keytrace — One identity, many proofs.
Link your GitHub, domain, and other accounts to your internet handle. Cryptographically signed, user-owned, and portable.
Email explained from first principles
Modern email is a patchwork of protocols and extensions. Here is one article to understand them all.
Blog | 1Password
Expert articles, security news, product updates, guides, and research from 1Password on password management, privacy, and digital security.
1Password & Browserbase - Pioneering agentic autofill for credential access
Browserbase is the complete platform to build and deploy agents that browse and interact with the web like humans.
🦫 alert! We published the second episode of "Teach the Web new Tricks", featuring native support for @atproto.com ! Learn more how we improve user agency and privacy at webbeef.org/atproto.html : - Native at:// protocol support. - Log in your PDS and forget OAuth ! - Authorize 3rd parties
