Passwords are a form of knowledge-based authentication. For a user to prove they are who they claim to be, they need a secret — the password — that has been previously stored by the service. Multifactor authentication (MFA) is a technique designed to strengthen the authentication process by adding possession-based authentication to knowledge-based authentication. A service can only authenticate a user when they prove they have knowledge of the shared secret in addition to something they have or are. Eliminating shared secrets removes the intrinsic weakness of password-based authentication and MFA. A secure form of possession-based authentication is the best alternative. Passwordless authentication based on FIDO standards is considered the archetype. FIDO passwordless authentication is based on public-key cryptography.
MORE FIDO in the News
GB News: If you’re using a password on this list, change it now – hackers could break into your account in seconds
The most common passwords of 2023, including “123456” and “admin,”...December 1, 2023
Biometric Update: Digital IDs mean manageable and critical change, FIDO tells US federal security leaders
FIDO Alliance webinar aimed at U.S. federal data-security officials to...
Inside Cybersecurity: FIDO Alliance emphasizes need for agency feedback on implementing authentication standard
FIDO Alliance seeks increased government involvement to develop comprehensive guidelines...