Trusted Devices: Unlocking a Password Manager without a password

Presented at BSidesLV 2023, Aug. 9, 2023, 6 p.m. (Unknown duration).

How do you unlock a password manager without a password? How do you get a decryption key from an SSO sign-in or a passkey? In this talk, we'll discuss how we approached the problem, and the fundamental changes to password manager design needed to make good on the promise of passwordless.

Presenters:

• Rick van Galen
  Rick, or RvG, is a security engineer at 1Password. He's worked in security for ten years as a security tester, researcher and engineer.
• James Griffin
  Staff developer at 1Password working on authentication

Links:

• https://www.bsideslv.org/talks#AZ7SLE

Similar Presentations:

• BSidesLV 2016 / Evaluating a password manager
• HushCon Seattle 2017 / And _that_ is how you get level 9 access without a password
• Black Hat Europe 2014 / Session Identifier are for Now, Passwords are Forever - XSS-Based Abuse of Browser Password Managers