NIST SP 800-63 Digital Identity Standard: Updates & What It Means for Passkeys

About the NIST SP 800-63

The NIST SP 800-63-3 Digital Identity Standard is a free publication by the U.S. National Institute of Standards and Technology (NIST). The first set of digital identity guidelines was published in 2003; this latest update will be the fourth revision, as NIST continues to update the guidance to address the evolving marketplace and security risks across the digital landscape.

The NIST SP 800-63 includes a suite of four volumes to outline the process and technical requirements for achieving digital identity management assurance levels for identity proofing, user authentication, and federation, with additional guidance on security, privacy, equity, and usability. The NIST digital identity guidelines have been integrated into security frameworks and cybersecurity requirements throughout the U.S., international governments, and the global marketplace. Therefore, the new revision will have significant implications for digital identity management in both the public and private sectors.

Why revise NIST SP 800-63 now?

Since the acceleration of digital transformation over the last five years, the proliferation of online services has driven the need for dependable, equitable, secure, and privacy-conscious digital identity solutions. The NIST SP 800-63, Revision 4, addresses the evolving digital environment since its last major update in 2017 and covers real-world online security risks and the latest in privacy, equity, and usability standards.

With the advancement of passkeys since 2022, the fourth revision is also set to focus significantly on the value of FIDO authentication and passkey implementation for a breadth of passkey use cases.

To get the inside scoop from FIDO and NIST subject matter experts, watch the on-demand webinar covering the new guidelines and what it means for passkeys. Then, make any public comments on the second Public Draft of Revision 4, by October 7, 2024. Learn more on NIST’s website at https://pages.nist.gov/800-63-4/.