Multifactor authentication can bear weaknesses that render its efficacy moot. A common response and answer to the most problematic forms of MFA, though the details are limited at best, is phishing-resistant MFA.

The qualifier, phishing resistant, is broadly defined as modes of authentication that rely on cryptographic techniques, such as an asymmetric pair of private and public keys, the Web Authentication API (WebAuthn) specification, biometrics or the FIDO2 standard. 


More

Biometric Update: Agents are going rogue, and it’s up to the identity sector to govern them

The AI apocalypse is trending. Warnings are flying that continuing to develop AI technology at the current…

Read More →

WiredGov: How we made it easier for millions of users to sign into government services

This month, the Government Digital Service (GDS) made it faster, easier and more secure to…

Read More →

Biometric Update: UK rolls out passkeys for GOV.UK One Login

The UK government is expanding passkey sign-in for GOV.UK One Login after an initial trial.…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.