Despite exciting progress toward more secure and usable factors, the best MFA mechanism for consumers really isn’t MFA at all — it’s passkeys. Passkeys are a FIDO authenticator with the advantage of being backed up to the cloud, so if you lose your device or buy a new one, all you must do is sign into your iCloud or Google Play account to recover your passkeys. Passkeys use public key cryptography and device biometrics, making them resistant to many known attacks, and are easy for the user.


More

helpnetsecurity: Bitwarden launches passkey management for passwordless authentication across accounts

Bitwarden has launched passkey management, enabling every user to create, manage, and store passkeys in…

Read More →

CHIP: What is a passkey? Easily explained

Anyone who wants to log into apps or websites usually uses a password to identify…

Read More →

DevClass: A further push for passkeys: Android Credential Manager generally available from November 1st

Google’s Diego Zavala, product manager on the authentication team, insists that “Passkeys are the future…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.