Passwords are a form of knowledge-based authentication. For a user to prove they are who they claim to be, they need a secret — the password — that has been previously stored by the service. Multifactor authentication (MFA) is a technique designed to strengthen the authentication process by adding possession-based authentication to knowledge-based authentication. A service can only authenticate a user when they prove they have knowledge of the shared secret in addition to something they have or are. Eliminating shared secrets removes the intrinsic weakness of password-based authentication and MFA. A secure form of possession-based authentication is the best alternative. Passwordless authentication based on FIDO standards is considered the archetype. FIDO passwordless authentication is based on public-key cryptography.
More FIDO in the News
IT Daily: Paradigm shift Zero Trust: Three theses for the future of IAM
The protection of sensitive company networks and critical infrastructures is increasingly in focus, also in…
Help Net Security: Swissbit iShield FIDO2 protects access to applications and online services
Swissbit is adding a new product category to its security solutions portfolio. With iShield FIDO2,…
Fintech Times: trinamiX Face Authentication Checks Skin vs Other Material as Well as 3D Depth
trinamiX Face Authentication fulfils the biometric security requirements defined by the International Internet Finance Authentication…
Subscribe to the FIDO newsletter
Stay Connected, Stay Engaged
Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.
"*" indicates required fields
