Despite exciting progress toward more secure and usable factors, the best MFA mechanism for consumers really isn’t MFA at all — it’s passkeys. Passkeys are a FIDO authenticator with the advantage of being backed up to the cloud, so if you lose your device or buy a new one, all you must do is sign into your iCloud or Google Play account to recover your passkeys. Passkeys use public key cryptography and device biometrics, making them resistant to many known attacks, and are easy for the user.


More

SC Media: What should Musk do to better secure Twitter users after 2FA goes away?

In just two weeks, the ban on SMS two-factor authentication for non-subscribers on Twitter will…

Read More →

Tech Target: GitHub 2FA plan adds SMS, account lockout safeguards

GitHub reaffirmed this week that it is testing passkeys from the FIDO Alliance industry association,…

Read More →

Ghacks: How to configure two-step login via FIDO2 WebAuthn in Bitwarden

Bitwarden password manager users who want to step up the security may configure two-step login…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.