Multifactor authentication can bear weaknesses that render its efficacy moot. A common response and answer to the most problematic forms of MFA, though the details are limited at best, is phishing-resistant MFA.

The qualifier, phishing resistant, is broadly defined as modes of authentication that rely on cryptographic techniques, such as an asymmetric pair of private and public keys, the Web Authentication API (WebAuthn) specification, biometrics or the FIDO2 standard. 


More

CNET: World Password Day: We’re closer to ditching this crackable tech

Passkeys promise to be a big help, but until they take hold, we all need…

Read More →

The Washington Post: Microsoft is changing how you log in to your accounts

Microsoft 365, Copilot and Skype accounts can use “passkeys”, which are more secure than passwords.

Read More →

Verdict: OneSpan: Partner Ecosystem Profile

The company’s various solutions include regulatory compliance, PSD2 compliance, FIDO standard, fraud prevention, mobile app…

Read More →