This project aims to develop a passwordless authentication system that eliminates password-related vulnerabilities. The system uses public key cryptography to authenticate users securely without requiring traditional passwords.
Study password-based authentication weaknesses and attack methods.
Understand public-private key cryptography fundamentals.
Design a passwordless authentication workflow.
Implement key pair generation and secure storage mechanisms.
Use cryptographic challenge–response authentication.
Integrate biometric or device-based authentication options.
Implement secure session handling and token management.
Test resistance against phishing and credential theft attacks.
Measure authentication speed and user experience.
Evaluate security improvements over password-based systems.
Document deployment considerations and limitations.
