Multifactor authentication can bear weaknesses that render its efficacy moot. A common response and answer to the most problematic forms of MFA, though the details are limited at best, is phishing-resistant MFA.

The qualifier, phishing resistant, is broadly defined as modes of authentication that rely on cryptographic techniques, such as an asymmetric pair of private and public keys, the Web Authentication API (WebAuthn) specification, biometrics or the FIDO2 standard. 


More

Computing: Passwordless authentication gaining popularity, Computing research finds

Half of UK IT leaders polled say their organisation is now using passkeys. Passkeys are…

Read More →

Finextra: Deep Dive: Mastercard Verifiable Intent vs Visa Trusted Agent Protocol

Agentic commerce breaks a core assumption of online payments, that a human is directly clicking…

Read More →

The Defiant: Mastercard and Google Team Up to Build Trust for AI-Powered Shopping

Mastercard has unveiled Verifiable Intent, a new open, standards-based trust framework co-developed with Google, designed…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.