The problem
Reused and weak passwords are the commonest cause of account takeover, and resets burden help desks.
What to build
Implement a passkey-based sign-in flow for a sample web app with recovery that does not weaken security.
Success looks like
A working registration, login and recovery flow and a short analysis of the threats it reduces.
Suggested technologies
- WebAuthn
- Passkeys
- Account recovery
- Session security
- Threat modelling
An original, independent statement. It is not an official Smart India Hackathon problem statement, and Arventiq Labs is not affiliated with or endorsed by that programme. The scenario is illustrative and does not describe any specific organisation. Free to use with credit.