Passwordless authentication replaces passwords with cryptographic keys, biometrics, or magic links. It reduces phishing risk, removes password resets, and limits attack surfaces. But removing passwords changes failure modes. With passwords, you can fall back to “reset”. Without them, chaos testing becomes critical.
Chaos testing for passwordless authentication means intentionally breaking