Multifactor authentication can bear weaknesses that render its efficacy moot. A common response and answer to the most problematic forms of MFA, though the details are limited at best, is phishing-resistant MFA.

The qualifier, phishing resistant, is broadly defined as modes of authentication that rely on cryptographic techniques, such as an asymmetric pair of private and public keys, the Web Authentication API (WebAuthn) specification, biometrics or the FIDO2 standard. 


More

Identity Week: New FIDO Alliance and HID study reveals major gap between identity security confidence and reality

Research Reveals 94% of Enterprises Claim They Can Revoke Employee Access Within 24 Hours, Yet…

Read More →

Biometric Update: Passkey adoption stalls at scale despite strong interest, new study shows

The FIDO Alliance and HID have released new research showing a widening gap between enterprise confidence in identity security…

Read More →

HRTECH EDGE: Most Enterprises Think Identity Access Is Secure. New Research Suggests Otherwise

Enterprises may be more confident about identity security than they should be. A new report…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.