modern-auth-2026

Master passwordless-first authentication with passkeys, OAuth, magic links, and cross-device sync for modern web and mobile applications.

| WebAuthn L2 | Browser passkey API | Fully supported | | FIDO2/CTAP2 | Cross-platform passkeys | Mature | | OAuth 2.1 | Simplified OAuth | Replacing 2.0 | | OAuth3 | Short-lived tokens | Emerging | | Passkey Sync | iCloud/Google sync | Production |

| Method | Phishing-Resistant | Device-Bound | Sync-Capable | Friction |

Modern authentication implementation for 2026 - passkeys (WebAuthn), OAuth (Google, Apple), magic links, and cross-device sync. Use for passwordless-first authentication, social login setup, Supabase Auth, Next.js auth flows, and multi-factor authentication. Activate on "passkeys", "WebAuthn", "Google Sign-In", "Apple Sign-In", "magic link", "passwordless", "authentication", "login", "OAuth", "social login". NOT for session management without auth (use standard JWT docs), authorization/RBAC (use security-auditor), or API key management (use api-architect). Source: curiositech/some_claude_skills.