#014 — Web Authentication Methods
Date: August 14, 2026 | 19:00 London / 21:00 Kyiv
Format: Guest talk · technical deep-dive · ~60–70 minutes
Guest: Oleksandr Blazheiko
YouTube: https://youtube.com/live/x2MGgT3qkN8
Participants
Oleksandr Blazheiko — Software Development Engineer · Fullstack
Ukraine
LinkedIn · itvibe.party
What we'll cover
From passwords in a database to passkeys in the Secure Enclave: how a web app answers the question "who are you?" — and why most of the answers are already outdated. Oleksandr Blazheiko walks through a full map of user authentication methods.
Topics
- Authentication vs authorization + the four categories of proof factors
- Passwords: Argon2id/bcrypt done right vs what breaks it (forced rotation, unsalted SHA)
- Second factor, ranked: SMS/TOTP vs FIDO2/YubiKey — why not all MFA is equal
- Biometrics on the web — why the data never leaves the device
- Session cookies vs JWT, HTTP auth schemes (Basic/Bearer/mTLS/HMAC)
- OAuth 2.0 vs OIDC vs SAML — the most common mix-up
- WebAuthn and passkeys step by step — why phishing becomes technically impossible
- Implementation checklist: what to get right
Key takeaways
Added after the stream.
Timecodes
Added after the stream.