Multifactor authentication can bear weaknesses that render its efficacy moot. A common response and answer to the most problematic forms of MFA, though the details are limited at best, is phishing-resistant MFA.

The qualifier, phishing resistant, is broadly defined as modes of authentication that rely on cryptographic techniques, such as an asymmetric pair of private and public keys, the Web Authentication API (WebAuthn) specification, biometrics or the FIDO2 standard. 


More

Dark Reading: FIDO Alliance to Tackle Identity Verification and IoT Authentication

The FIDO Alliance has launched two new standards and certifications initiatives to advance identity verification…

Read More →

CNET: FIDO Alliance looks to create standards for Internet of Things devices

The FIDO Alliance is expanding to develop security standards for IoT devices before internet of things devices boom…

Read More →

VentureBeat: You can now use your Android phone as a 2FA security key for Google accounts on iOS

VentureBeat reports that the newly certified FIDO2 security keys on Android phones can now verify…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.