Passwords are a form of knowledge-based authentication. For a user to prove they are who they claim to be, they need a secret — the password — that has been previously stored by the service. Multifactor authentication (MFA) is a technique designed to strengthen the authentication process by adding possession-based authentication to knowledge-based authentication. A service can only authenticate a user when they prove they have knowledge of the shared secret in addition to something they have or are. Eliminating shared secrets removes the intrinsic weakness of password-based authentication and MFA. A secure form of possession-based authentication is the best alternative. Passwordless authentication based on FIDO standards is considered the archetype. FIDO passwordless authentication is based on public-key cryptography.


More

ZDNet: Windows 10 moves closer to killing off passwords with Edge WebAuthn logins

Through Microsoft Edge’s support of WebAuthn, users will be able to sign in using a…

Read More →

Digital Trends: Use your face or finger to log into accounts using Microsoft Edge

In this article, Digital Trends reports that Microsoft Edge now supports the Web Authentication specification…

Read More →

CNBC: Google wants to replace your password routine with a tiny device that plugs into your computer

The FIDO Security Key has helped to kill all successful account takeovers by phishing at…

Read More →