A set of open standards for passwordless authentication. The FIDO Alliance, an industry consortium, developed these standards to address the security and convenience challenges of traditional password-based authentication. FIDO standards enable strong, phishing-resistant authentication using cryptographic key pairs and local verification methods like biometrics or security keys.
Supported Authentication Technologies
FIDO supports a variety of authentication technologies, including:
- Biometrics: Fingerprint and iris scanners, voice and facial recognition.
- Security tokens: USB security tokens, embedded Secure Elements (eSE), and smart cards.
- Communication standards: Near-field communication (NFC) and Trusted Platform Modules (TPM).
How FIDO Works
FIDO authentication involves the following steps:
- Key generation: During registration, the user’s device generates a cryptographic key pair.
- Key registration: The public key is registered with the online service, while the private key remains on the device.
- Authentication: The user’s device proves possession of the private key using a local verification method, such as a biometric, PIN, or security key.
Security and Privacy Benefits
FIDO standards enhance security and privacy by:
- Phishing resistance: Passkeys are unique to each service and resistant to phishing attacks.
- Data minimization: Biometric information, if used, never leaves the user’s device, protecting user privacy.
