Multifactor authentication can bear weaknesses that render its efficacy moot. A common response and answer to the most problematic forms of MFA, though the details are limited at best, is phishing-resistant MFA.

The qualifier, phishing resistant, is broadly defined as modes of authentication that rely on cryptographic techniques, such as an asymmetric pair of private and public keys, the Web Authentication API (WebAuthn) specification, biometrics or the FIDO2 standard. 


More

Microsoft Blog: Microsoft introduces passkeys for consumer accounts

Ten years ago, Microsoft envisioned a bold future: a world free of passwords. Every year,…

Read More →

ZDNet: Two years in, Google says passkeys now protect more than 400 million accounts

Google Account users have authenticated themselves using passkeys more than 1 billion times, but passwords…

Read More →

Google Blog: Passkeys, cross-account protection and new ways we’re protecting your accounts

For World Password Day, we’re sharing updates to passkeys across our products and sharing more…

Read More →