FinTech, healthcare, and consumer SaaS applications eliminating credential-stuffing attacks and SMS OTP friction frequently search to hire a freelance Passkeys (WebAuthn / FIDO2), passwordless authentication & MFA programmer. I am Aldian Fazrihady, a Senior Freelance Full Stack Developer and Identity Security Architect available via Upwork.
Core Passkey (WebAuthn) & Multi-Factor Authentication Capabilities
- Cross-Device Synced & Hardware Passkeys (`@simplewebauthn` / `py_webauthn`): Implementing Apple iCloud Keychain, Google Password Manager, 1Password, and YubiKey FIDO2 registration and conditional UI autofill (`autocomplete="username webauthn"`).
- Step-Up Authentication for Sensitive Mutations: Requiring biometric Passkey or TOTP (`RFC 6238`) confirmation before API key creation, wire payouts, or role privilege escalations.
- Session Hardening & Device Fingerprinting: Rotating short-lived tokens with reuse-detection revocation families in Redis and PostgreSQL.
Frequently Asked Questions
How do you handle account recovery if a user loses a device with an non-synced hardware passkey?
I implement multi-credential enrollment (allowing users to register multiple devices/YubiKeys), hashed single-use recovery codes, and verified identity re-enrollment flows.
How can we hire you as a freelance Passkeys & authentication programmer?
Message me on Upwork.