Multifactor authentication can bear weaknesses that render its efficacy moot. A common response and answer to the most problematic forms of MFA, though the details are limited at best, is phishing-resistant MFA.

The qualifier, phishing resistant, is broadly defined as modes of authentication that rely on cryptographic techniques, such as an asymmetric pair of private and public keys, the Web Authentication API (WebAuthn) specification, biometrics or the FIDO2 standard. 


More

ID Tech: Better Identity Coalition Circulates Draft Voluntary Code of Conduct for Verifiable Credentials

The Better Identity Coalition has circulated a draft voluntary code of conduct it describes as…

Read More →

Biometric Update: Passkeys offer potential solution to increased deepfake attacks on financial services

Among sectors vulnerable to AI-assisted fraud attacks, the financial industry is perhaps the ripest. With…

Read More →

Biometric Update: Calling Utah: SEDI offers template for fast-tracking digital identity schemes

A presentation from Chief Privacy Officer for the State of Utah Christopher Bramwell at the FIDO Identity…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.