Despite exciting progress toward more secure and usable factors, the best MFA mechanism for consumers really isn’t MFA at all — it’s passkeys. Passkeys are a FIDO authenticator with the advantage of being backed up to the cloud, so if you lose your device or buy a new one, all you must do is sign into your iCloud or Google Play account to recover your passkeys. Passkeys use public key cryptography and device biometrics, making them resistant to many known attacks, and are easy for the user.


More

VentureBeat: Google introduces passwordless authentication to Chrome and Android with passkeys

Password-based security is an oxymoron. With over 15 billion exposed credentials leaked on the dark web, and…

Read More →

Cybersecurity Dive: What is phishing-resistant multifactor authentication? It’s complicated.

Multifactor authentication can bear weaknesses that render its efficacy moot. A common response and answer…

Read More →

All About Security: FIDO Alliance introduces new certification program

The FIDO Alliance has expanded its range of certification programs: With the new Document Authenticity (DocAuth) Certification…

Read More →