February 14, 2014

Can the FIDO Alliance Help Obsolete Username Password Authentication?

John Oltsik, NetworkWorld

What does this specification do? Simply stated, it provides standard protocols so that devices (like smart phones, tablets, PCs, IoT sensors, etc.) can easily participate in PKI infrastructure using just about any type of authentication technology as one of the factors. Don’t have a thumbprint reader on your phone? No problem. FIDO can find some other unique identifier (a TPM chip for example) and use this to create a key pair and act as the root of trust. Additionally, FIDO can create unique key pairs for different applications and services (i.e. Windows logon, Facebook, Paypal, etc.) and FIDO provides an abstraction layer so the actual private keys never leave the device and remain secure.

MORE FIDO in the News


The Inquirer: Microsoft goes all in on FIDO2 as it dreams of a password-free future

Microsoft has been working towards killing the password for some...

May 10, 2019

The Next Web: Passwordless web gets a boost from Windows Hello FIDO2 certification

The Next Web reports that Windows Hello, Microsoft’s passwordless authentication...

May 9, 2019

The Verge: When can we finally get rid of passwords?

The Verge reports that passwords, and all the risks that...

April 24, 2019

ZDNet: Google transforms Android phones into security keys

At the Google Cloud Next conference, Google showcased the next...

April 10, 2019
Download Specs