Passwords are a form of knowledge-based authentication. For a user to prove they are who they claim to be, they need a secret — the password — that has been previously stored by the service. Multifactor authentication (MFA) is a technique designed to strengthen the authentication process by adding possession-based authentication to knowledge-based authentication. A service can only authenticate a user when they prove they have knowledge of the shared secret in addition to something they have or are. Eliminating shared secrets removes the intrinsic weakness of password-based authentication and MFA. A secure form of possession-based authentication is the best alternative. Passwordless authentication based on FIDO standards is considered the archetype. FIDO passwordless authentication is based on public-key cryptography.
MORE FIDO in the News
Journal du Net: Digital accessibility: Why CIOs should make it a priority
In this byline, Andrew Shikiar explains how simple and safe...March 23, 2023
L’Eclaireur FNAC: How password managers are preparing for a future … without passwords
Passwordless authentication has the potential to continue to grow in...
ComputerWeekly: Accessible authentication: What companies need to consider
In this byline, Andrew Shikiar, executive director and CMO of...
Communications of the ACM: Passkeys unlock a new era for authentication
Until recently, replacing passwords has ranked somewhere between tricky and...