Multifactor authentication can bear weaknesses that render its efficacy moot. A common response and answer to the most problematic forms of MFA, though the details are limited at best, is phishing-resistant MFA.

The qualifier, phishing resistant, is broadly defined as modes of authentication that rely on cryptographic techniques, such as an asymmetric pair of private and public keys, the Web Authentication API (WebAuthn) specification, biometrics or the FIDO2 standard. 


More

TWIF: Whose Agent is it Anyway? | This Week in Fraud

Big Story: It’s 10pm. Do you know what your AI agent is buying? On Sept.…

Read More →

IoT News: WBA and FIDO test zero-touch IoT Wi-Fi onboarding

Industrial operators can automate IoT onboarding across Wi-Fi networks through a joint specification from the Wireless…

Read More →

Tech Times: Visa Payment Passkey Goes Live at Five India State Banks: OTP Attack Surface Eliminated

India’s five-decade-old authentication habit — waiting for a six-digit code on a phone — got…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.