Passwords are a form of knowledge-based authentication. For a user to prove they are who they claim to be, they need a secret — the password — that has been previously stored by the service. Multifactor authentication (MFA) is a technique designed to strengthen the authentication process by adding possession-based authentication to knowledge-based authentication. A service can only authenticate a user when they prove they have knowledge of the shared secret in addition to something they have or are. Eliminating shared secrets removes the intrinsic weakness of password-based authentication and MFA. A secure form of possession-based authentication is the best alternative. Passwordless authentication based on FIDO standards is considered the archetype. FIDO passwordless authentication is based on public-key cryptography.


More

Identity Week: HID’s 2024 report highlights mobile IDs, MFA, and sustainability in security trends

With over 83% of organisations currently using MFA, the shift away from password-dependency is clear.…

Read More →

Neowin: Proton Pass gets passkey support for both free and paid users

Proton has announced passkey support in its Proton Pass password manager, which now offers enhanced…

Read More →

Biometric Update: FIDO’s influence expands with new security key and board member

Cisco has further solidified its commitment to passkeys by joining the FIDO Alliance’s board of…

Read More →


123234 Next