Building Passwordless Authentication Systems with Open Hardware and FOSS

Simple understand on how most of the passwordless system works.
Webauthn and fido underlying backbone for this systems to work and how we can try to incoperate
more security via hardware tokens.

main difference btw soft token systems ( bitwarden and os level key chains[ macos and windows keymanager] ) and hard token systems (yubikey , thales key)

We should be able to produce hardware based key since google enforces to use hard token in every session for employees in the google servers and office network.

The core standards behind passwordless systems (WebAuthn, FIDO2, CTAP),
Using open-source implementations such as OpenSK to build custom security devices and try to make a self owned custom security device in nrf52 or esp32 based boards.

This will be why passwords are fundamentally insecure and why the industry is moving toward passwordless authentication.