Authentication is scary, difficult, dangerous, and… essential. Most apps need some form of it, often as a prerequisite for almost all end-user requests. This session proposes an authentication architecture for the modern, open web, using modern, passwordless standards and edge computing; one that's fast, distributed, secure, isolated from the rest of your system, and minimally annoying to integrate and maintain.