The talk will cover modern methods such as passkeys, TOTP, and biometrics, along with more advanced patterns like offline authentication for mobile apps. Attendees will learn how to implement these strategies leveraging React Native primitives while understanding the security trade-offs and best practices.

In a period where the digital landscape is constantly evolving, the way we understand and interact with the web & internet is undergoing a profound transformation.

The web democratised how we connect with each other and how we exchange information. This talk takes a guided approach to introduce some of the concepts that could shape how we developers build for the web in the near future.

Looking into open standards that take into consideration the user’s data, identity and trust.

When building apps with strict security requirements, developers often default to fully native or brownfield approaches, assuming that JavaScript-based solutions fall short. However, times have changed—many of the security blockers that once limited React Native have been overcome, allowing greenfield apps to achieve the same level of security as their native counterparts.

But security isn’t automatic. Developers must still take deliberate steps to safeguard their apps. By leveraging Expo modules, we can implement critical security features such as secure storage, encrypted networking with TLS pinning, and host whitelisting. Additionally, advanced protections like device assurance, runtime security, and threat monitoring play a crucial role in keeping our apps safe against modern threats—yet many React Native developers remain unfamiliar with them.

In this talk, we’ll explore the essential security technologies available to React Native engineers, demystify key security concepts, and showcase how you can build truly secure mobile applications—without sacrificing the benefits of React Native.

How to implement authentication in SvelteKit. We'll implement everything ourselves from scratch, with the PKCE flow. Then, we'll see how simple it can get with EdgeDB.