Multifactor authentication can bear weaknesses that render its efficacy moot. A common response and answer to the most problematic forms of MFA, though the details are limited at best, is phishing-resistant MFA.

The qualifier, phishing resistant, is broadly defined as modes of authentication that rely on cryptographic techniques, such as an asymmetric pair of private and public keys, the Web Authentication API (WebAuthn) specification, biometrics or the FIDO2 standard. 


More

GBFR: Beyond OTP: How Banks Can Build a Passkey Control Plane

Passkeys can reduce exposure to phishing and shared-secret theft, but the banking opportunity depends on…

Read More →

Biometric Update: Mexico’s new banking rules signal a new era for biometric identity verification

Opening a bank account today looks very different than it did a decade ago. Behind…

Read More →

SFWeekly: The End of Passwords? Preparing Your Company for Passkeys

Key Takeaways How many passwords did you reset last month? If you’re like most people,…

Read More →


123333 Next

Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.