Passkeys,” the secure authentication mechanism built to replace passwords, are getting more portable and easier for organizations to implement thanks to new initiatives the FIDO Alliance announced this month.

At the FIDO Alliance’s Authenticate Conference in Carlsbad, California, on Monday, October 14, researchers are announcing two projects that will make passkeys easier for organizations to offer—and easier for everyone to use. One is a new technical specification called Credential Exchange Protocol (CXP) that will make passkeys portable between digital ecosystems, a feature that users have increasingly demanded. The other is a website, called Passkey Central, where developers and system administrators can find resources like metrics and implementation guides that make it easier to add support for passkeys on existing digital platforms.

“To me, both announcements are part of the broader story of the industry working together to stop our dependence on passwords,” Andrew Shikiar, CEO of the FIDO Alliance, told WIRED ahead of Monday’s announcements. “And when it comes to CXP, we have all these companies who are fierce competitors willing to collaborate on credential exchange.”


More

CPO Magazine: Targeted Phishing Attacks That Overtook MFA – Setting up a Better Security Defense

Last month two companies, Twilio and Cloudflare, were attacked by cyber criminals. While it may be…

Read More →

VentureBeat: Google introduces passwordless authentication to Chrome and Android with passkeys

Password-based security is an oxymoron. With over 15 billion exposed credentials leaked on the dark web, and…

Read More →

Cybersecurity Dive: What is phishing-resistant multifactor authentication? It’s complicated.

Multifactor authentication can bear weaknesses that render its efficacy moot. A common response and answer…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.