Gone Phishing: Airbnb's Journey to Phishing-Resistant MFA

High-profile breaches keep hitting the headlines, and even the best passwords are useless once they’re dumped on the dark web. This session explains why legacy MFA flows are easy to phish and why macOS admins can’t rely on them anymore.

Graham walks through Airbnb’s move to phishing-resistant security keys for employees, contractors, and partners—covering stakeholder buy-in, rollout planning for different user groups, and lessons learned along the way.