February 14, 2014

Can the FIDO Alliance Help Obsolete Username Password Authentication?

John Oltsik, NetworkWorld

What does this specification do? Simply stated, it provides standard protocols so that devices (like smart phones, tablets, PCs, IoT sensors, etc.) can easily participate in PKI infrastructure using just about any type of authentication technology as one of the factors. Don’t have a thumbprint reader on your phone? No problem. FIDO can find some other unique identifier (a TPM chip for example) and use this to create a key pair and act as the root of trust. Additionally, FIDO can create unique key pairs for different applications and services (i.e. Windows logon, Facebook, Paypal, etc.) and FIDO provides an abstraction layer so the actual private keys never leave the device and remain secure.

MORE FIDO in the News


Biometric Update: Transparency can drive digital ID equity, policy forum panelists say

An event last week on ‘Identity, Authentication and the Road...

February 3, 2023

Tech Republic: Unphishable mobile MFA through hardware keys

Passwords are a mess, MFA can be more of a...


Intelligent CISO: Passing on passwords in 2023 (finally)

Passwords are often an organisation’s weakest link. On World Password...


CyberWire: NIST on phishing resistance

According to NIST Special Publication DRAFT 800-63-B4, a phishing-resistant authenticator...

Download Authn Specs
Sign up for updates!Get news from FIDO Alliance in your inbox.

By submitting this form, you are consenting to receive communications from: FIDO Alliance, 3855 SW 153rd Drive, Beaverton, OR 97003, US, http://www.fidoalliance.org. You can revoke your consent to receive emails at any time by using the unsubscribe link found at the bottom of every email.