FIDO2
The authentication standard made up of the W3C WebAuthn browser API and the FIDO Alliance's CTAP protocol for external authenticators; passkeys and hardware security keys are built on it. It uses public-key cryptography bound to the website's domain, which makes it phishing-resistant MFA. Move administrators and privileged accounts to it first.
Further reading: fidoalliance.org
From the Security Academy
Multi-Factor Authentication (MFA) Rollout Guide: What Is Strongest and Where to Start
How SMS, OTP, push, number matching and FIDO2/passkeys compare on phishing resistance, how push bombing and AiTM bypass MFA, and where to enable it first.
7 min read ·
Advisories that mention this term
No advisories mention this term yet.