According to NIST Special Publication DRAFT 800-63-B4, a phishing-resistant authenticator offers “the ability of the authentication protocol to detect and prevent disclosure of authentication secrets and valid authenticator outputs to an impostor relying party without reliance on the vigilance of the subscriber.” Two examples of phishing-resistant authenticators are PIV cards for US Federal employees and FIDO authenticators paired with W3C’s Web Authentication API for the private sector.


More

FinTech Magazine: Delegated Authentication – Abandon Friction, Not the Cart

This opinion piece explores how eCommerce retailers can overcome the age-old headache of cart abandonment…

Read More →

Wall Street Journal: Tech that will Change Your Life in 2022

Analyzing industry trends and insights from industry experts, this piece offers predictions for tech in…

Read More →

The Green Sheet: Digital Commerce in 2022 – Part I

This article analyzes the four pillars of digital commerce—security, intelligence, agility and transparency—and their predicted…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.