Every business needs a secure way to collect, manage, and authenticate passwords. Unfortunately, no method is foolproof. Storing passwords in the browser and sending one-time access codes by SMS or authenticator apps can be bypassed by phishing. Password management products are more secure, but they have vulnerabilities as shown by the recent LastPass breach that exposed an encrypted backup of a database of saved passwords. For organizations with high security requirements, that leaves hardware-based login options such as FIDO devices.


More

Dark Reading: How to Get the Most Benefits from Biometrics

The best way to defragment the biometric ecosystem is to adopt FIDO open standards and…

Read More →

CSO: Eliminating Bad Password Behavior

CSO reports that FIDO2 represents a major step forward in internet security, paving the way…

Read More →

Gizmodo: Here’s the Best Way to Protect Your Accounts From Hacker Takeovers

Gizmodo reports on a recent Google study showing that FIDO security keys are the most…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.