Multifactor authentication can bear weaknesses that render its efficacy moot. A common response and answer to the most problematic forms of MFA, though the details are limited at best, is phishing-resistant MFA.

The qualifier, phishing resistant, is broadly defined as modes of authentication that rely on cryptographic techniques, such as an asymmetric pair of private and public keys, the Web Authentication API (WebAuthn) specification, biometrics or the FIDO2 standard. 


More

VentureBeat: You can now use your Android phone as a 2FA security key for Google accounts on iOS

VentureBeat reports that the newly certified FIDO2 security keys on Android phones can now verify…

Read More →

Dark Reading: How to Get the Most Benefits from Biometrics

The best way to defragment the biometric ecosystem is to adopt FIDO open standards and…

Read More →

CSO: Eliminating Bad Password Behavior

CSO reports that FIDO2 represents a major step forward in internet security, paving the way…

Read More →