Well-implemented passkeys can improve the user experience and make it harder for cybercriminals to launch phishing and other attacks.

Passwords are a central aspect of security infrastructure and practice, but they are also a principal weakness involved in 81% of all hacking breaches. Inherent useability problems make passwords difficult for users to manage safely. These security and useability shortcomings have driven the search for alternative approaches known generally as passwordless authentication.

Passkeys are a kind of passwordless authentication that is seeing increasing focus and adoption. They are set to become a key part of security in the coming years. Passkeys represent a more secure foundation for enterprise security. Although they are not foolproof (they can be synced to a device running an insecure OS, for example), they are far more secure than passwords for customers, employees, and partners alike.


More

SC Media: What should Musk do to better secure Twitter users after 2FA goes away?

In just two weeks, the ban on SMS two-factor authentication for non-subscribers on Twitter will…

Read More →

Tech Target: GitHub 2FA plan adds SMS, account lockout safeguards

GitHub reaffirmed this week that it is testing passkeys from the FIDO Alliance industry association,…

Read More →

Ghacks: How to configure two-step login via FIDO2 WebAuthn in Bitwarden

Bitwarden password manager users who want to step up the security may configure two-step login…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.