Recent academic research has revealed new insights into the security considerations surrounding FIDO2 authentication and synced passkeys, highlighting both the strengths and potential vulnerabilities of current authentication systems. The analysis comes at a time when major technology companies are increasingly adopting passkey technology, with Microsoft reporting login times three times faster than traditional passwords.

Formal methods analysis of the FIDO2 standard has revealed potential weaknesses in the underlying protocols that warrant attention from security professionals. The research particularly focuses on the implementation of synced passkeys, which enable cross-device access through passkey providers. These findings support recent expert warnings about interoperability concerns in FIDO2 implementations.


More

Venturebeat: Firefox 66 brings Web Authentication API support for Windows Hello

WebAuthn support for Windows Hello means that with the next Windows 10 update, users will…

Read More →

PC World: WebAuthn: What you need to know about the future of the passwordless Web

In this feature article, PC World answers common questions about Web Authentication – what is…

Read More →

VentureBeat: W3C approves WebAuthn as the web standard for password-free logins

VentureBeat reports that the World Wide Web Consortium (W3C) today declared that the Web Authentication…

Read More →