Multifactor authentication can bear weaknesses that render its efficacy moot. A common response and answer to the most problematic forms of MFA, though the details are limited at best, is phishing-resistant MFA.

The qualifier, phishing resistant, is broadly defined as modes of authentication that rely on cryptographic techniques, such as an asymmetric pair of private and public keys, the Web Authentication API (WebAuthn) specification, biometrics or the FIDO2 standard. 


More

IBS Intelligence: FIDO Alliance research tracks passwordless authentication in the UK

FIDO Alliance has launched its Online Authentication Barometer to track the uptake of secure authentication…

Read More →

IT-Zoom: The Passwordless Decade Begins

Authentication via password is neither convenient nor secure. Access technologies that actually manage without a…

Read More →

TEISS: SMS Authentication: why it’s bad (and what to do instead)

Twitter’s Account Security Report shows users still opt for SMS authentication. Andrew Shikiar at the…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.