Passwords are a form of knowledge-based authentication. For a user to prove they are who they claim to be, they need a secret — the password — that has been previously stored by the service. Multifactor authentication (MFA) is a technique designed to strengthen the authentication process by adding possession-based authentication to knowledge-based authentication. A service can only authenticate a user when they prove they have knowledge of the shared secret in addition to something they have or are. Eliminating shared secrets removes the intrinsic weakness of password-based authentication and MFA. A secure form of possession-based authentication is the best alternative. Passwordless authentication based on FIDO standards is considered the archetype. FIDO passwordless authentication is based on public-key cryptography.
More FIDO in the News
Mashable: This smart ring gives you instant mobile payments with beefed up security
The Token smart ring allows wearers to make mobile payments, unlock doors, and, through the…
The New York Times: The Tech That Our Security Experts Use to Be Digitally Secure
Security experts from the New York Times explain why they use FIDO security keys for…
CSO: Two years after the OPM data breach: What government agencies must do now
In this look back at the OPM data breach, Jeremy Grant of Venable and FIDO’s…
