Passkeys deployment at scale - our journey and best practices
Source: YouTube · FIDO Alliance · published Feb 6, 2025 · 22:19
eBay's product team details their passkey deployment journey, achieving 14% adoption across 25 million users through iterative UX simplification, strategic enrollment prompting, and technical error resolution to reduce password reliance 0:26.
Key Takeaways:
• eBay reached 14% passkey adoption with over 25 million enrolled users and a 93% sign-in success rate among passkey users 0:31.
• Iterative testing of enrollment prompts—removing "passkey" from headlines and CTAs, adding familiar visuals like Face ID icons, and simplifying copy—increased adoption from 5% to 12% 2:45.
• A "key ID not found" error in conditional mediation flows impacted power users; removing conditional mediation from the username identifier page dramatically improved sign-in success rates 6:10.
• For cross-device users without a passkey on a given device, eBay employs "personalized sign-in" that dynamically offers the best available fallback—SMS OTP, social login, or password 8:30.
• Multi-channel communication including targeted emails, updated help pages, and power user sessions was critical for education, and password reset volumes decreased significantly as a byproduct 7:00.
eBay's experience demonstrates that successful passwordless adoption requires balancing technical robustness with intuitive UX design, using FIDO standards to build a secure and frictionless future for global users.
Sources:
- 0:26 Session intro and topic overview
- [0:31](https://www.youtube.com/watch?v
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Identity & Access Management. Commonly maps to: Identity and Access Management (IAM), Security Architecture and Engineering. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
all right hi everyone welcome to the next session here uh my name is Tim from the program committee and I'm here to introduce um some folks from eBay to talk about their uh deployment Journey with pasis we have mandar and Mary um and we're going to do uh questions at the mic uh towards the end but we will use that mic in the middle and you can also submit online so take it away guys thank you hey welcome everyone thanks for joining for our talk we're going to talk about Pas case this conference is about pasis briefly about me my name is mahinder I'm a product manager at eBay I lead authentication account security account uh management and I've been in the identity industry for almost 10 years now and I'm very passionate about passwordless and that's why you see me in authenticate every yea…