Multifactor authentication can bear weaknesses that render its efficacy moot. A common response and answer to the most problematic forms of MFA, though the details are limited at best, is phishing-resistant MFA.

The qualifier, phishing resistant, is broadly defined as modes of authentication that rely on cryptographic techniques, such as an asymmetric pair of private and public keys, the Web Authentication API (WebAuthn) specification, biometrics or the FIDO2 standard. 


More

Biometric Update: From passkeys to digital trust with FIDO’s Andrew Shikiar

The Biometric Update Podcast explores the next phase of digital identity, from passkeys and digital…

Read More →

GBFR: Beyond OTP: How Banks Can Build a Passkey Control Plane

Passkeys can reduce exposure to phishing and shared-secret theft, but the banking opportunity depends on…

Read More →

Biometric Update: Mexico’s new banking rules signal a new era for biometric identity verification

Opening a bank account today looks very different than it did a decade ago. Behind…

Read More →


123334 Next

Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.