Passwordless Authentication Using the TKey Device

Sammanfattning

In our increasingly connected digital world, secure access to online services is veryimportant. With the rise of data breaches, phishing attacks, and password reuse,the demand grows for authentication methods that are both highly secure with easeof use. This thesis explores a secure authentication system that removes traditionalpasswords in favor of using the TKey device, a hardware security token that employsasymmetric cryptography and dynamic key generation. This study covers thenecessary theoretical background, the design and implementation of the authenticationsystem, and an analysis of potential security risks. An agile developmentapproach was used to build and test a working prototype, with evaluations madethrough unit, and usability tests. Additionally, the work discusses the societal andethical considerations of deploying such technology, including accessibility and datahandling, and suggests practical directions for future improvements.