According to NIST Special Publication DRAFT 800-63-B4, a phishing-resistant authenticator offers “the ability of the authentication protocol to detect and prevent disclosure of authentication secrets and valid authenticator outputs to an impostor relying party without reliance on the vigilance of the subscriber.” Two examples of phishing-resistant authenticators are PIV cards for US Federal employees and FIDO authenticators paired with W3C’s Web Authentication API for the private sector.


More

TechGenyz: Password-Free Future: How Biometrics & Passkeys Unlock True Security 

While biometrics offer convenience, passkeys provide the backbone for the next stage in authentication. Developed…

Read More →

Forbes: The iPhone’s New Camera? Whatever. The iPhone’s New Wallet? Cool. 

Apple’s approach to identity in wallets is built on open standards, including the W3C’s Digital…

Read More →

Biometric Update: Bitwarden among first to implement FIDO credential exchange standards on iOS 26

Apple iOS 26 has landed, and it includes support for FIDO Alliance Credential Exchange standards…

Read More →