jchowlabs
Passkey Authentication
Featured

Passkeys: Interactive Demo

An interactive, step-by-step exploration of how passkey-based authentication works in practice. This lab visually breaks down passkey registration and authentication flows, showing on-device key generation, cryptographic challenge signing, and server-side verification as they occur. Rather than treating passkeys as a black box, the demo exposes the underlying operations and trust assumptions that replace passwords, helping practitioners understand why passkeys are phishing-resistant and how they fit into modern identity architectures.

Identity Provider

Build Your Own Identity Provider

Build a lightweight identity provider from scratch to explore how modern identity systems work under the hood. This lab covers the core building blocks behind dentity platforms used by large global enterprises, including directories, authentication flows, federation engines, and threat protection mechanisms.

Directory SAML Passkeys Biometrics
Password Manager

Build Your Own Password Manager

A browser extension–based password management solution built from scratch, featuring end-to-end encryption, pseudo-random secret generation, and multi-factor authentication. This lab explores the architecture and security principles behind modern password vaults and how these systems operate in practice.

Encryption Security Password Vault
Facial Recognition

Build a Face Verification System

Build a facial verification system from scratch to explore how identity verification systems work under the hood. This interactive lab examines biometric matching, liveness detection, and deepfake defenses, similar to those used in enterprise-grade identity verification platforms.

Biometrics Deepfake Liveness
AI Agent Guardrails

Build AI Agent Guardrails

Build guardrails for AI agents to understand how control and governance work in autonomous systems. This lab examines how agent instructions, tool access, and permissions translate into real capabilities, surfacing potential risk paths and unintended behavior before execution.

Governance Policy Engine AI Safety