Despite exciting progress toward more secure and usable factors, the best MFA mechanism for consumers really isn’t MFA at all — it’s passkeys. Passkeys are a FIDO authenticator with the advantage of being backed up to the cloud, so if you lose your device or buy a new one, all you must do is sign into your iCloud or Google Play account to recover your passkeys. Passkeys use public key cryptography and device biometrics, making them resistant to many known attacks, and are easy for the user.


More

ZDNet: Two years in, Google says passkeys now protect more than 400 million accounts

Google Account users have authenticated themselves using passkeys more than 1 billion times, but passwords…

Read More →

Google Blog: Passkeys, cross-account protection and new ways we’re protecting your accounts

For World Password Day, we’re sharing updates to passkeys across our products and sharing more…

Read More →

CNET: World Password Day: We’re closer to ditching this crackable tech

Passkeys promise to be a big help, but until they take hold, we all need…

Read More →