January 27, 2023

Security Boulevard: Are you using a FIDO Certified authenticator?

Multi-factor authentication (MFA) gets touted as a significant security improvement over traditional “username + password” authentication. However, not all MFA processes are created equal. As the opportunities narrow for cybercriminals to pick off the low-hanging fruit of password-only systems, they’ve turned their focus to weak MFA.

A growing number of organizations have suffered security breaches despite having MFA in place, thanks to expanding digital systems, more advanced phishing tools, and the continued allowance of passwords as an authentication factor. The past year, which saw Microsoft, Uber and Cisco breached by MFA “prompt bombing,” demonstrates that organizations can’t just deploy any type of MFA and presume they’re safe from breaches.

For these reasons, the federal Office of Management and Budget (OMB) and the Cyber and Infrastructure Security Agency (CISA) have emphasized the need for phishing-resistant MFA, specifically passwordless MFA built around FIDO standards. We’ve examined FIDO standards and what they mean for authentication before, but in this post, we look at one of the most critical elements of the process: FIDO Certified authenticators.

MORE FIDO in the News


Informatik aktuell: FIDO Passkeys 2 – in the future without a password

The FIDO Alliance is committed to making the Internet and...

September 15, 2023

TechRadar: BitWarden adds passwordless SSO

Bitwarden has now added Single Sign-On (SSO) support for trusted...


Smashing Security: 339: Bitcoin boo-boo, deepfakes for good, and time to say goodbye to usernames?

Podcast episode where FIDO Passkeys are mentioned and linked to.


The Green Sheet: The extraordinary life of a payment – Security checkpoints

Andrew Shikiar is quoted in the lead story of The...