FIDO In the News - Press articles featuring FIDO Alliance

Bleeping Computer: Okta – Hackers target IT help desks to gain Super Admin, disable MFA

Lori Glavin — Tue, 12 Sep 2023 15:53:31 +0000

Identity and access management company Okta released a warning about social engineering attacks targeting IT service desk agents at U.S.-based customers in an attempt to trick them into resetting multi-factor authentication (MFA) for high-privileged users. To protect admin accounts from external actors, Okta recommends enforcing phishing-resistant authentication using Okta FastPass and FIDO2 WebAuthn.

The post Bleeping Computer: Okta – Hackers target IT help desks to gain Super Admin, disable MFA appeared first on FIDO Alliance.

Security Magazine: Embracing a company culture of cybersecurity starts at the top

Lori Glavin — Tue, 12 Sep 2023 15:50:35 +0000

Andrew’s byline where he discusses how cybersecurity needs to be a top-down movement, simplifying the process for employees so they do not end up with password fatigue. The culture change should come from leadership, working with the IT team and stakeholders, to ensure better cybersecurity.

The post Security Magazine: Embracing a company culture of cybersecurity starts at the top appeared first on FIDO Alliance.

Forbes: Cyber Autumn: Captivating Cybersecurity Conferences to Dive Into This October 2023

Lori Glavin — Fri, 01 Sep 2023 17:06:50 +0000

Authenticate 2023 is the go-to event for everything related to user authentication. Hosted by the FIDO Alliance, this unique conference is set to take place from October 16-18, 2023, at the Omni La Costa Resort in Carlsbad, CA, just north of San Diego. The conference is designed to give CISOs, business leaders, product managers, and security experts the know-how, tools, and best practices they need to implement state-of-the-art authentication across a range of applications.

The post Forbes: Cyber Autumn: Captivating Cybersecurity Conferences to Dive Into This October 2023 appeared first on FIDO Alliance.

The Verge: X Wants Permission to Start Collecting Your Biometric Data and Employment History

Lori Glavin — Fri, 01 Sep 2023 17:05:21 +0000

X Wants Permission to Start Collecting Your Biometric Data and Employment HistoryAccording to findings from app developer Steve Moser, X plans on rolling out support for passkeys, which can use your device’s fingerprint, facial recognition, or PIN to log in to your account. However, the FIDO Alliance — a nonprofit organization that advocates for the use of passkeys — says biometric data and processing “continues to stay on the device and is never sent to any remote server.”

The post The Verge: X Wants Permission to Start Collecting Your Biometric Data and Employment History appeared first on FIDO Alliance.

SC Media: 3 trends shaping cybersecurity: Passwordless authentication, securing the supply chain and AI

Lori Glavin — Fri, 01 Sep 2023 17:04:12 +0000

Passwordless authentication is one of those concepts that is finally having its day in the sun after Apple, Google and Microsoft came onboard last year, expanding their support for the passwordless sign-in standard created by the FIDO Alliance and the World Wide Web Consortium. “The work that the FIDO Alliance has done to roll out passkeys, really positioning them as a strong way for consumers to start using and leveraging that strong PKI authentication, I think that is a really good step forward,” said Josh Cigna, enterprise solutions architect at Yubico.

The post SC Media: 3 trends shaping cybersecurity: Passwordless authentication, securing the supply chain and AI appeared first on FIDO Alliance.

IEEE Spectrum: Google Develops Quantum-Safe Security Keys

Lori Glavin — Fri, 01 Sep 2023 17:02:51 +0000

Google has developed a quantum-resilient way of implementing the FIDO2 security key standard, an increasingly popular method of authentication that’s used as an alternative to passwords. David Turner, senior director of standards development at FIDO Alliance, which manages password-free authentication standards, said post-quantum changes to security keys are expected to come with challenges.

The post IEEE Spectrum: Google Develops Quantum-Safe Security Keys appeared first on FIDO Alliance.

TechRadar: LinkedIn and X are planning to ditch passwords

Lori Glavin — Fri, 01 Sep 2023 17:01:32 +0000

Two of the biggest social media sites, X (formerly Twitter) and LinkedIn, are reportedly soon set to support passkeys, a way for users to log in to their accounts without using a password. According to discoveries made by iOS developer Steve Mosher, the two services contain code that suggest they will soon be compatible with the new technology, whose standards are governed by the FIDO alliance as set out in the FIDO2 specifications.

The post TechRadar: LinkedIn and X are planning to ditch passwords appeared first on FIDO Alliance.

Infosecurity Magazine: Microsoft warns of adversary-in-the-middle uptick on phishing platform

Lori Glavin — Fri, 01 Sep 2023 17:00:04 +0000

Microsoft has observed a proliferation of adversary-in-the-middle (AiTM) techniques deployed through phishing-as-a-service (PhaaS) platforms, the company explained in a series of tweets posted on August 28, 2023. “This emphasizes the importance of MFA through methods like Microsoft Authenticator, FIDO2 security keys and certificate-based authentication in securing identities,” the company said.

The post Infosecurity Magazine: Microsoft warns of adversary-in-the-middle uptick on phishing platform appeared first on FIDO Alliance.

Cybersecurity Dive: Government investigation puts spotlight on password insecurity

Lori Glavin — Fri, 25 Aug 2023 16:41:23 +0000

When the U.S. Department of the Interior recently conducted an internal investigation into password security, the findings described a situation ripe for exploitation by enterprising cybercriminals. In his Washington Post column, Greenblatt illustrates how his department needs to move away from passwords. We can bolster security with passwordless authentication in the form of passkeys. It’s impossible to access a passkey-protected account without physical access to the end-user device.

The post Cybersecurity Dive: Government investigation puts spotlight on password insecurity appeared first on FIDO Alliance.

Computerworld: Managed Apple IDs, iCloud, and the shadow IT connection

Lori Glavin — Fri, 25 Aug 2023 16:39:30 +0000

One new addition will be the ability to sync iCloud Keychain, Apple’s de facto password and passkey management utility. It integrates with Apple’s biometric services, Touch ID and Face ID. This is a major potential boon for enterprises, particularly those adopting passkeys to replace passwords.

The post Computerworld: Managed Apple IDs, iCloud, and the shadow IT connection appeared first on FIDO Alliance.

Infosecurity Magazine: Why it’s time to kick the password habit

Lori Glavin — Fri, 25 Aug 2023 16:05:59 +0000

Andrew Shikiar discusses why passwords are so hard to give up, and why they should be replaced with passkeys for more security.

The post Infosecurity Magazine: Why it’s time to kick the password habit appeared first on FIDO Alliance.

Biometric Update: Authenticate 2023

Lori Glavin — Fri, 25 Aug 2023 15:59:56 +0000

It’s time to modernize your authentication! Organizations around the globe are embracing a new way to authenticate with FIDO standards, moving past passwords and legacy forms of multifactor authentication to provide users with passkeys for phishing-resistant sign-ins.

The post Biometric Update: Authenticate 2023 appeared first on FIDO Alliance.

HelpNet Security: Anticipating the next wave of IoT cybersecurity challenges

Lori Glavin — Fri, 25 Aug 2023 15:56:11 +0000

Ensuring a seamless integration of IoT with cybersecurity requires a strategic approach by technology leaders. Emphasizing secure bootstrapping, employing advanced, scalable onboarding standards such as FIDO onboarding device, and meticulously building a trusted supply chain are essential. Beyond these, it’s about creating a vigilant ecosystem where every component is not just included but examined for security integrity.

The post HelpNet Security: Anticipating the next wave of IoT cybersecurity challenges appeared first on FIDO Alliance.

FIDO Alliance: FIDO Alliance details agenda for Authenticate 2023, featuring keynote from Rachel Tobac, noted White Hat Hacker and SocialProof Security CEO

Lori Glavin — Fri, 04 Aug 2023 17:33:20 +0000

3-day program for FIDO Alliance’s flagship event on the future of user authentication includes 90+ sessions; Early Bird registration available through August 18

CARLSBAD, Calif., Aug. 3, 2023 /PRNewswire/ — The FIDO Alliance announced its keynote speakers and full agenda for Authenticate 2023, the only industry conference dedicated to all aspects of user authentication.

This year’s featured keynote will be presented by Rachel Tobac, white hat hacker and social engineering expert whose exploits have been featured on CNN, 60 Minutes and more. Additional keynote presentations providing diverse and global perspectives on modern authentication will be delivered by speakers from 1Password, Amazon, Google, Microsoft, Yubico and others.

The post FIDO Alliance: FIDO Alliance details agenda for Authenticate 2023, featuring keynote from Rachel Tobac, noted White Hat Hacker and SocialProof Security CEO appeared first on FIDO Alliance.

CyberSecurity Asean: FIDO APAC Summit Keynotes and Sponsors Announced

Lori Glavin — Fri, 04 Aug 2023 17:31:11 +0000

The FIDO Alliance today provided an updated list of speakers and sponsors for its first-ever FIDO APAC Summit, the premier event dedicated to advancing and promoting phishing-resistant FIDO authentication in the region. Co-hosted by the Ministry of Information and Communications (Vietnam), the summit will take place in Vinpearl Nha Trang, Vietnam, on 28 – 30 August 2023, and centers on the theme of “Connecting for a Safer Digital Future”.

The post CyberSecurity Asean: FIDO APAC Summit Keynotes and Sponsors Announced appeared first on FIDO Alliance.

Biometric Update: Biometric authentication accuracy bar rises, assurance levels evolve in NIST guidance

Lori Glavin — Fri, 04 Aug 2023 17:25:51 +0000

Biometrics performance requirements have been upgraded and identity assurance levels revised in the latest draft update to the U.S. National Institute of Standards and Technology’s Digital Identity Guidelines. NIST reviewed the changes so far, the numerous comments submitted about them, and possible further revisions in a recent webinar.

The changes to biometrics guidelines include a more stringent accuracy requirement for authentication to align with other standards advanced since the previous version was finalized in 2017.

The post Biometric Update: Biometric authentication accuracy bar rises, assurance levels evolve in NIST guidance appeared first on FIDO Alliance.

Computer Weekly: Going passwordless in online shopping

Lori Glavin — Fri, 04 Aug 2023 17:23:01 +0000

In the last few years, the FIDO Alliance, an open industry association, has helped businesses and users authenticate with maximum security and minimum friction. The WebAuthn standard provides the technological foundation by enabling brands to authenticate users with public key cryptography instead of a password.

The post Computer Weekly: Going passwordless in online shopping appeared first on FIDO Alliance.

Heise: We have just reached the turning point

Lori Glavin — Fri, 28 Jul 2023 15:41:29 +0000

Andrew Shikiar is Executive Director of the FIDO Alliance, which developed the Passkeys login process. In an interview with c’t, he answers all the questions that came to us during testing.

The post Heise: We have just reached the turning point appeared first on FIDO Alliance.

Teiss: The rise and rise of passkeys in the tech industry

Lori Glavin — Fri, 28 Jul 2023 15:40:34 +0000

Andrew Shikiar, Executive Director and CMO at FIDO Alliance asks in his byline: why are we still being passive-aggressive about passwords?

The post Teiss: The rise and rise of passkeys in the tech industry appeared first on FIDO Alliance.

Connect-living: Keys instead of passwords: This is how a secure login with an access key works

Lori Glavin — Fri, 28 Jul 2023 13:32:24 +0000

Phishing and other attacks usually have one goal: passwords. So the world could be a better place without passwords. There have already been several attempts to bury the passwords. All have failed – due to the complexity, the costs for hardware keys, for example, or the inconvenient use. The new approach with FIDO2 and Passkeys sounds more promising. By the way, FIDO stands for Fast Identity Online.

The post Connect-living: Keys instead of passwords: This is how a secure login with an access key works appeared first on FIDO Alliance.

News-24: How passkeys will open the door to a more secure and passwordless future

Lori Glavin — Fri, 28 Jul 2023 13:31:22 +0000

More than 24 billion usernames and passwords were available on the dark web last year, a 65% increase since 2020, according to research by Digital Shadows, a digital risk protection company. To this end, the cybersecurity industry is striving to adopt solutions that would eliminate the need for passwords altogether. The latest technology uses what is known as passkeys.

The post News-24: How passkeys will open the door to a more secure and passwordless future appeared first on FIDO Alliance.

B2B Cybersecurity: Effortless authentication with passkeys

Lori Glavin — Wed, 26 Jul 2023 15:30:46 +0000

Passkeys are easier to use than many traditional authentication methods. They are also resistant to phishing, which allows users to consistently and securely log in to supported websites. The passwordless technology, first introduced in 2022, is based on industry standards from the World Wide Web Consortium (W3C) and the FIDO Alliance and is supported by Apple, Google, Microsoft, Paypal, eBay and others.

The post B2B Cybersecurity: Effortless authentication with passkeys appeared first on FIDO Alliance.

Biometricupdate.com: 1Password, Microsoft move to biometric authentication

Lori Glavin — Wed, 26 Jul 2023 15:29:39 +0000

1Password and Microsoft are among vendors moving to passwordless login, switching to phishing-resistant biometric passkeys. In a blog post, 1Password announced a private beta test for passkey account access on iOS and iPadOS.

The post Biometricupdate.com: 1Password, Microsoft move to biometric authentication appeared first on FIDO Alliance.

9TO5Mac: 1Password will soon let users unlock password vaults with passkeys

Lori Glavin — Thu, 20 Jul 2023 17:34:31 +0000

Popular password manager 1Password teased in June that native support for passkeys is coming to the iPhone and iPad app with iOS 17. Now 1Password is taking another big step toward a world without traditional passwords, this time replacing the key to users’ password vaults. Soon, 1Password users will be able to unlock their vaults using just a passkey.

The post 9TO5Mac: 1Password will soon let users unlock password vaults with passkeys appeared first on FIDO Alliance.

IT Brew: Enterprises and developers play leading role in passwordless future

Lori Glavin — Tue, 18 Jul 2023 15:52:13 +0000

Many industry pros are increasingly channeling their inner Bill Gates in 2004 and predicting the decline of the password. The PW prognosticating demonstrates some confidence in the IT world that a passwordless infrastructure is now sufficiently in place. “The most notable shift over the past couple of years has been that every major platform vendor is now supporting open standards for passwordless authentication that are in their flagship operating systems. So, this means for the first time that virtually every modern computing device has the capability to support passwordless authentication,” said Andrew Shikiar, executive director and chief marketing officer at FIDO.

The post IT Brew: Enterprises and developers play leading role in passwordless future appeared first on FIDO Alliance.

Engadget: What the hell are passkeys and why are they suddenly everywhere?

Lori Glavin — Tue, 18 Jul 2023 15:51:08 +0000

Passkeys promise a future without passwords, where we access our accounts as easily as we unlock our phones, with a much higher level of security. “It’s the closest to something that can be scaled to get rid of passwords that we’ve ever seen,” said Megan Shamas, senior director of marketing at industry association FIDO Alliance. A passkey is a digital authentication credential that is securely stored on your device. Instead of what Shamas called a “shared secret” method of passwords, passkeys are a unique key pair for every online service you use bound to the domain.

The post Engadget: What the hell are passkeys and why are they suddenly everywhere? appeared first on FIDO Alliance.

heise: Passwordless login to GitHub: Passkeys in beta

Lori Glavin — Tue, 18 Jul 2023 15:47:26 +0000

GitHub takes another step to replace passwords as a login method and brings passkeys into public beta. Passkeys are the FIDO Alliance’s latest move to simplify secure logins on the Internet – they are intended to solve many of the everyday problems that U2F and FIDO2 hardware tokens bring with them.

The post heise: Passwordless login to GitHub: Passkeys in beta appeared first on FIDO Alliance.

Cashy’s Blog: TikTok now also supports passkeys for login on iOS

Lori Glavin — Tue, 18 Jul 2023 15:46:28 +0000

The short video platform TikTok has announced that it will also be possible to log in with passkeys – on iOS devices. At the same time, it is confirmed that TikTok has now become a member of the FIDO Alliance. Passkeys replace traditional passwords and use encrypted biometric data already stored on your device. They are not processed directly by third-party apps – not even by TikTok.

The post Cashy’s Blog: TikTok now also supports passkeys for login on iOS appeared first on FIDO Alliance.

B2B Cyber Security: Best practices for zero trust

Lori Glavin — Fri, 07 Jul 2023 12:43:12 +0000

Replacing traditional MFA with strong, passwordless authentication methods allows security teams to build the first layer of their Zero Trust architecture. Replacing passwords with FIDO-based passkeys that use asymmetric cryptography, and combining them with secure device-based biometrics, creates a phishing-resistant MFA approach.

The post B2B Cyber Security: Best practices for zero trust appeared first on FIDO Alliance.

ComputerWeekly: The management level in companies must actively live IT security

Lori Glavin — Fri, 07 Jul 2023 12:42:16 +0000

FIDO Alliance’s Andrew Shikiar shares his view on how cyber security is often viewed as a purely technical issue. In this article, he underlines how important security should be firmly integrated into the corporate culture, especially from the management level.

The post ComputerWeekly: The management level in companies must actively live IT security appeared first on FIDO Alliance.

Silicon: Passwordless: an innovative approach to securing access

Lori Glavin — Fri, 07 Jul 2023 12:27:27 +0000

Most of the major players in the sector (Microsoft, Google and Apple in particular) have started to join forces on the subject to think about the technical solutions thanks to which Passwordless could be achieved in future years. FIDO Alliance, WebAuthn and proposed authentication factors, find out what Passwordless is all about.

The post Silicon: Passwordless: an innovative approach to securing access appeared first on FIDO Alliance.

MobileID World: FIDO white papers explain how to use passkeys in the enterprise

Lori Glavin — Thu, 06 Jul 2023 13:58:54 +0000

The FIDO Alliance has published a new set of papers aimed at offering guidance on how passkeys can be used across different enterprise environments.

The post MobileID World: FIDO white papers explain how to use passkeys in the enterprise appeared first on FIDO Alliance.

B2B Cyber Security: Best practices for zero trust

Lori Glavin — Thu, 06 Jul 2023 13:58:03 +0000

The post B2B Cyber Security: Best practices for zero trust appeared first on FIDO Alliance.

Gov Info Security: Feds urge healthcare providers, vendors to use strong MFA

Lori Glavin — Thu, 06 Jul 2023 13:56:18 +0000

HHS OCR is the latest federal agency pushing for more widespread adoption of multifactor authentication. Cybersecurity and Infrastructure Security Agency Director Jen Easterly last October during an address at a FIDO Alliance conference also urged technology vendors to “forcefully nudge” users into MFA.

The post Gov Info Security: Feds urge healthcare providers, vendors to use strong MFA appeared first on FIDO Alliance.

heise online: Passwordless login: Apple ID automatically receives a passkey from iOS 17

Lori Glavin — Wed, 21 Jun 2023 19:37:05 +0000

Apple is pushing the Passkey train, which is intended to replace passwords. The passkey setup for iCloud & Co takes place automatically in Apple operating systems.

The post heise online: Passwordless login: Apple ID automatically receives a passkey from iOS 17 appeared first on FIDO Alliance.

Route Fifty: Passwordless security gains ground

Lori Glavin — Wed, 21 Jun 2023 19:33:52 +0000

In what it called the “beginning of the end of the password,” Google last month began rolling out its own passkeys, an effort that could help agencies go passwordless and embrace a “zero trust” approach with layers of authentication required. Google’s move could create a “positive snowball effect” away from passwords, said Andrew Shikiar, executive director of the FIDO Alliance, which works to develop open authentication standards.

The post Route Fifty: Passwordless security gains ground appeared first on FIDO Alliance.

Axiad Blog: FIDO Series Part 1: What is FIDO Passkey and Why is it Important?

Lori Glavin — Fri, 02 Jun 2023 18:01:39 +0000

Cybercrime is an enormous problem in today’s world and continues to grow at an exponential rate. In fact, according to Cybersecurity Ventures, the cost of cybercrime is predicted to hit $8 trillion in 2023 and will grow to a whopping $10.5 trillion by 2025.

One of the main enablers for the escalation in cybercrime is the over-reliance on passwords. According to the FIDO (Fast Identity Online) Alliance, passwords are the root cause of more than 80% of data breaches. This is because passwords can easily be phished, intercepted in transit, and uncovered via a variety of attacks. Further, users are often overburdened with remembering passwords across, on average, 90 different online accounts. It’s no surprise then that 51% of people re-use non-complex passwords across multiple accounts. As a result, weak or re-used passwords are effortlessly accessed by criminals. So, rather than execute complex hacks, threat actors simply log in to accounts to execute cybercrimes. The good news is, there is a better way: passwordless authentication, also known as phishing-resistant Multi-Factor Authentication (MFA).

The post Axiad Blog: FIDO Series Part 1: What is FIDO Passkey and Why is it Important? appeared first on FIDO Alliance.

heise: Password: goodbye

Lori Glavin — Fri, 02 Jun 2023 16:13:38 +0000

Passkeys could replace the password. You are safe and the technology is in almost all operating systems and browsers. Now the providers are in demand.

The post heise: Password: goodbye appeared first on FIDO Alliance.

PYMNTS: Delegated authentication helps speed the shift to passwordless future

Lori Glavin — Fri, 02 Jun 2023 16:12:31 +0000

According to Jonathan Van der Merwe, group lead product manager at Entersekt, one of the biggest stumbling blocks toward a passwordless future is the technological and behavioral hesitations that come with it. Van der Merwe suggests that moving away from static passwords toward one-time passwords (OTPs), in-app authentication and fast identity online (FIDO) is the way forward. “Moving on to newer technologies like FIDO, which allows for federated authentication ID within the application that you’re using to authenticate yourself, is effectively using the application using your device, whether that’s a laptop, a PC, or a mobile device,” he told PYMNTS.

The post PYMNTS: Delegated authentication helps speed the shift to passwordless future appeared first on FIDO Alliance.

The Federal: Explainer: What are passkeys, how to get them, why they’re safer than passwords

Lori Glavin — Fri, 02 Jun 2023 16:10:58 +0000

Goodbye passwords, passkeys are here. Passwords are all set to be deleted and relegated into the recycle bin, as a more secure alternative has now been developed. Known as ‘passkeys’, they are the new more convenient and safer way to sign into your accounts across all your computing devices, including smartphones, sans your password.

The post The Federal: Explainer: What are passkeys, how to get them, why they’re safer than passwords appeared first on FIDO Alliance.

DocuSign Blog

Lori Glavin — Fri, 02 Jun 2023 16:09:07 +0000

Passkeys are the next evolution of login credentials. They replace hard-to-remember passwords and verify anyone’s identity with biometric information, providing an easier and more secure way to access apps and websites. Thanks to our partnership with Google, DocuSign customers can now take a step toward a passwordless future by using passkeys to log in on mobile devices and web browsers.

The post DocuSign Blog appeared first on FIDO Alliance.

Leaders: The slow phaseout of passwords

Lori Glavin — Fri, 02 Jun 2023 16:07:44 +0000

On the dark web, cybercriminals have developed markets where passwords are bought and sold. Ransomware attacks are often performed using stolen passwords, Axios reports. Passkeys are generally considered more secure than passwords because hackers would need both the user’s information and the information from the company. If 1Password’s beta testing is successful, its current business model will fade into obscurity, and modern-day passwords will be a relic of a past, less secure age.

The post Leaders: The slow phaseout of passwords appeared first on FIDO Alliance.

Security Brief: The FIDO Alliance releases UX guidelines all about passkeys

Lori Glavin — Fri, 02 Jun 2023 16:05:11 +0000

The FIDO Alliance has released new user experience (UX) guidelines to help accelerate deployment and adoption of passkeys. The FIDO Alliance UX Guidelines for Passkey Creation and Sign-ins aim to help online service providers design a better, more consistent user experience when signing in with passkeys, the company states.

The post Security Brief: The FIDO Alliance releases UX guidelines all about passkeys appeared first on FIDO Alliance.

SC Media: New passkey milestones ‘ready for prime time,’ says FIDO Alliance leader

Lori Glavin — Fri, 02 Jun 2023 16:02:40 +0000

At the 2023 Identiverse conference, the nonprofit standards organization FIDO Alliance unveiled its new user experience guidelines for passkeys, which are generated and stored securely on users’ devices after those individuals register for a web application or service via their biometric data or a PIN. Among the various benefits: Users do not have to remember any credentials, nor are they prone to losing them via phishing scams. Moreover, passkeys can be synched across multiple user devices without having to re-enroll each time.

The post SC Media: New passkey milestones ‘ready for prime time,’ says FIDO Alliance leader appeared first on FIDO Alliance.

Security Intelligence: CISA, NSA Issue New IAM Best Practice Guidelines

Lori Glavin — Wed, 24 May 2023 15:55:56 +0000

The Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) recently released a new 31-page document outlining best practices for identity and access management (IAM) administrators. The most secure types of MFA include fast identity online (FIDO) and public key infrastructure (PKI).

The post Security Intelligence: CISA, NSA Issue New IAM Best Practice Guidelines appeared first on FIDO Alliance.

TechRadar.pro: Bitwarden now lets you create passkeys for your business apps

Lori Glavin — Fri, 19 May 2023 16:23:42 +0000

Bitwarden – in our view the best free password manager around – has announced Bitwarden Passwordless.dev, a toolkit to allow developers to integrate passkeys into consumer websites and enterprise applications.

The post TechRadar.pro: Bitwarden now lets you create passkeys for your business apps appeared first on FIDO Alliance.

Biometric Update: Consumers ready for passwordless technology and prefer biometrics; FIDO Alliance report

Lori Glavin — Fri, 19 May 2023 16:21:59 +0000

FIDO Alliance has published a report examining how the behavior, patterns and adoption of authentication technologies reflect the consumers’ readiness for passwordless technologies.

The post Biometric Update: Consumers ready for passwordless technology and prefer biometrics; FIDO Alliance report appeared first on FIDO Alliance.

The Verge: 1Password is finally rolling out passkey management

Lori Glavin — Fri, 19 May 2023 16:18:36 +0000

1Password customers are finally gaining partial access to the passwordless future we’ve been promised. Starting from June 6th this year, anyone with a 1Password account will be able to use it to save and manage their passkeys — a biometric-based login technology that allows users to ditch passwords in favor of their device’s own authentication. To access the open beta, you’ll need to download the 1Password beta browser extension for Safari, Firefox, or Chromium-based browsers (which include Chrome, Edge, Arc, and Brave). Support for passkeys on mobile is still in development and unavailable at this time.

The post The Verge: 1Password is finally rolling out passkey management appeared first on FIDO Alliance.

PC Mag: How to Set Up Passkeys for Your Google Account

Lori Glavin — Fri, 19 May 2023 16:15:21 +0000

Passkeys are easier to use and more secure than passwords, but getting started with them isn’t simple. We tell you how to set up and use passkeys for Google on all your devices.

The post PC Mag: How to Set Up Passkeys for Your Google Account appeared first on FIDO Alliance.

Fintech Finance News: Virtual Arena: Authentication in the World of Payments

Lori Glavin — Fri, 19 May 2023 16:14:10 +0000

Welcome back to another insightful Virtual Arena from FF News! In today’s episode, we’ll be taking a deep dive into the payments industry. As alternative payment methods and technologies continue to rise in prominence all over the world, the challenge of verifying the legitimacy of those payments only continues to grow. Today, we’ll be facing that challenge head-on with an in-depth discussion about authentication in the world of payments.

For this conversation, FF News’ Douglas Mackenzie is joined by Quentin Stephen of Giesecke + Devirent, Linda Weston of Barclaycard Payments and Andrew Shikiar of FIDO Alliance.

The post Fintech Finance News: Virtual Arena: Authentication in the World of Payments appeared first on FIDO Alliance.

Ars Technica: Passkeys may not be for you, but they are safe and easy—here’s why

Lori Glavin — Fri, 19 May 2023 16:12:41 +0000

My recent feature on passkeys attracted significant interest, and a number of the 1,100-plus comments raised questions about how the passkey system actually works and if it can be trusted. In response, I’ve put together this list of frequently asked questions to dispel a few myths and shed some light on what we know—and don’t know—about passkeys. This FAQ will be updated from time to time to answer additional questions of merit, so check back regularly. This author will not be monitoring or responding to comments going forward but can still be contacted through email.

The post Ars Technica: Passkeys may not be for you, but they are safe and easy—here’s why appeared first on FIDO Alliance.

IT Brew: At RSA, passkeys have the buzz

Lori Glavin — Fri, 19 May 2023 16:10:44 +0000

Google announced in early May that the company is moving accounts over to passkeys, a major move forward in the journey to a passwordless future.

The post IT Brew: At RSA, passkeys have the buzz appeared first on FIDO Alliance.

Wired: The war on passwords enters a chaotic new phase

Lori Glavin — Tue, 16 May 2023 15:32:35 +0000

There was never a question that it would take years to transition the world away from passwords. The digital authentication technology, though deeply flawed, is pervasive and inveterate. Over the last five years, though, the secure-authentication industry association known as the FIDO Alliance has been making real progress promoting “passkeys,” a password-less alternative for signing into applications and websites.

The post Wired: The war on passwords enters a chaotic new phase appeared first on FIDO Alliance.

The Verge: 1Password is finally rolling out passkey management

Lori Glavin — Tue, 16 May 2023 15:31:21 +0000

1Password customers are finally gaining access to the passwordless future we’ve been promised. Starting from June 6th this year, anyone with a 1Password account will be able to save and manage their passkeys — a biometric-based login technology that allows users to ditch passwords in favor of their device’s own authentication.

The post The Verge: 1Password is finally rolling out passkey management appeared first on FIDO Alliance.

SC Magazine: The 2023 Identiverse Trends Report

Lori Glavin — Tue, 16 May 2023 15:30:30 +0000

Safety and security have long been at the heart of identity and access management, and indeed the trends report states that “indications are that there will be a renewed focus on access control, entitlements, and permissioning over the next few years.” In keeping with the trend of the death of passwords equaling better authentication, the Identiverse report also celebrates the deployment of passkeys, the Apple-Google-Microsoft system that lets you log into websites with a smartphone instead of a password. We ourselves have had some trouble using passkeys — and the report hints at “the successes and learnings of early deployments” — but there’s no denying that passkeys will be a major step toward a passwordless future.

The post SC Magazine: The 2023 Identiverse Trends Report appeared first on FIDO Alliance.

Find Biometrics: Identity News Digest

Lori Glavin — Tue, 16 May 2023 15:29:17 +0000

About 57 percent of US consumers expressed interest in using passkeys to replace passwords, according to new survey data from the FIDO Alliance. According to FIDO Executive Director and CMO Andrew Shikiar, that points to rapidly growing excitement, given that only 39 percent of survey respondents said they were familiar with the passkey concept in a FIDO survey released last October. Passkeys essentially store complex passcodes for a user’s various online accounts on their mobile device, locking them behind a PIN or biometric scan. Google recently launched passkey support for its own Account login process, garnering considerable media attention in the process.

The post Find Biometrics: Identity News Digest appeared first on FIDO Alliance.

PC Mag: How to set up passkeys for your Google account

Lori Glavin — Tue, 16 May 2023 15:27:14 +0000

Passkeys are intended to be more secure and easier to use than passwords. Instead of typing in a password (or letting a password manager do it) and verifying with a multi-factor authentication method, passkeys only require a trusted device and either biometric or PIN verification. Part of why passkeys seem likely to replace passwords is that they’re designed by a consortium called the FIDO Alliance and championed by Apple, Google, and Microsoft. These three companies have already baked support for passkeys into their browsers and ecosystems, which means that for the first time, there’s a viable alternative to passwords. That said, passkeys have yet to see widespread adoption.

The post PC Mag: How to set up passkeys for your Google account appeared first on FIDO Alliance.

The Wall Street Journal: Hate passwords? It’s time to try passkeys

Lori Glavin — Tue, 16 May 2023 15:17:56 +0000

I no longer need a password to sign into Google. From now on, it’s “Adios, passwords…Hello, passkeys!” Sort of. This new form of login is like a digital lock and key. For sites and apps run by financial institutions and other slower-moving, ultracareful services, the shift will take more time, said Andrew Shikiar. He’s executive director of the FIDO Alliance, which creates the standards for online authentication technology such as passkeys. But there are already dozens of services where you can use passkeys to sign in.

The post The Wall Street Journal: Hate passwords? It’s time to try passkeys appeared first on FIDO Alliance.

Wired: Google is rolling out password-killing tech to all accounts

Lori Glavin — Wed, 03 May 2023 20:34:18 +0000

Google’s announcement of its passkey rollout comes on the eve of World Password Day on Thursday. But passkey proponents are ramping up their efforts to make the occasion obsolete.

“Eventually, it’s going to be like World Horse and Buggy Day, I think,” Shikiar says. “For the time being, it’s a good reminder of the challenge we have to get rid of passwords.”

The post Wired: Google is rolling out password-killing tech to all accounts appeared first on FIDO Alliance.

PC Mag: Misinformation, MFA Doubts, and AI: Everything We Saw at RSAC 2023

Lori Glavin — Mon, 01 May 2023 17:31:22 +0000

The RSA Conference further proved that passwords are a problem. The solution, we’re told, lies in using Passkeys, or cryptographic credentials that securely authenticate individuals without usernames or passwords and have multi-factor authentication (MFA) built-in. Several sessions at RSAC focused on the benefit of Passkeys, while also taking a look at the challenges still ahead.

The post PC Mag: Misinformation, MFA Doubts, and AI: Everything We Saw at RSAC 2023 appeared first on FIDO Alliance.

CIO Review: Nok Nok Partners With Carahsoft to Provide Phishing-Resistant MFA Solutions to Federal, State and Local Government Agencies

Lori Glavin — Mon, 01 May 2023 14:14:36 +0000

Nok Nok, a leader in passwordless authentication for the world’s largest organizations, today announced a partnership with Carahsoft Technology Corp. The Nok Nok S3 Authentication Suite is the first passwordless authentication platform based on FIDO standards that includes full support for both device-bound and synced passkeys and compliance solutions

The post CIO Review: Nok Nok Partners With Carahsoft to Provide Phishing-Resistant MFA Solutions to Federal, State and Local Government Agencies appeared first on FIDO Alliance.

Wealth Management: The Financial Industry’s 10 Most-Common Passwords

Lori Glavin — Mon, 01 May 2023 14:13:07 +0000

A new analysis by password manager NordPass stresses that major companies open themselves up to security risks by using passwords that lack creativity. While password trends slightly vary each year across different audiences, the general take is that people continuously fail with their password management, and the world desperately needs to switch to new online authentication solutions such as passkeys. Various progressive businesses such as Google, Microsoft, Apple, PayPal, KAYAK and eBay have already adopted passkey technology and are offering their users password-less logins. It is thought that in no time at all, other online companies will start following this trend.

The post Wealth Management: The Financial Industry’s 10 Most-Common Passwords appeared first on FIDO Alliance.

Biometric Update: FIDO Alliance paper positions protocol for EU Digital Identity Wallet authentications

Lori Glavin — Mon, 01 May 2023 14:08:27 +0000

The EU Digital Identity Wallet represents a significant growth opportunity for FIDO authentication, according to a new white paper from the FIDO Alliance. The 45-page white paper on ‘Using FIDO for the EUDI Wallet’ was written by IDnow Senior Architect Sebastian Elfors from the proceedings of the FIDO subgroup on the EUDI Wallet to help government agencies weigh the use of FIDO for the EUDI Wallet under the eIDAS2 regulation.

The post Biometric Update: FIDO Alliance paper positions protocol for EU Digital Identity Wallet authentications appeared first on FIDO Alliance.

Dark Reading: Twitter’s 2FA is a call for passkey disruption

Lori Glavin — Fri, 21 Apr 2023 14:55:15 +0000

Despite exciting progress toward more secure and usable factors, the best MFA mechanism for consumers really isn’t MFA at all — it’s passkeys. Passkeys are a FIDO authenticator with the advantage of being backed up to the cloud, so if you lose your device or buy a new one, all you must do is sign into your iCloud or Google Play account to recover your passkeys. Passkeys use public key cryptography and device biometrics, making them resistant to many known attacks, and are easy for the user.

The post Dark Reading: Twitter’s 2FA is a call for passkey disruption appeared first on FIDO Alliance.

The Fintech Times: Are passwords a thing of the past? A passwordless future: 1Password Report

Lori Glavin — Fri, 21 Apr 2023 14:54:12 +0000

There is a strong appetite amongst consumers for easier-to-use login experiences; according to human-centric security and privacy company 1Password – which has released its ‘Preparing for a Passwordless Future’ report. Andrew Shikiar, executive director and CMO of the FIDO Alliance, said: “Passwordless technology brings great benefits for companies and their customers alike—making it easier to securely access online services while greatly reducing fraud and user frustration. This has been the mission of the FIDO Alliance since day one, with authentication experts from hundreds of companies, including 1Password, collaborating to make this vision a reality with passkey sign-ins.”

The post The Fintech Times: Are passwords a thing of the past? A passwordless future: 1Password Report appeared first on FIDO Alliance.

Wired: The war on passwords enters a chaotic new phase

Lori Glavin — Fri, 21 Apr 2023 14:51:46 +0000

Over the last five years, though, the secure-authentication industry association known as the FIDO Alliance has been making real progress promoting “passkeys,” a password-less alternative for signing into applications and websites.

The post Wired: The war on passwords enters a chaotic new phase appeared first on FIDO Alliance.

The Green Sheet: Passwordless future within reach, experts say

Lori Glavin — Fri, 14 Apr 2023 15:50:39 +0000

FIDO Alliance held a virtual conference to assess recent advancement in creating simpler, stronger, authentication methods. The half-day event included panel discussions and fireside chats with experts from Google, Microsoft, Amazon and leading global brands that support FIDO’s mission to create secure, scalable alternatives to passwords. In opening remarks, Andrew Shikiar, executive director of FIDO Alliance, stated that FIDO deployments have helped companies reduce fraud, lower operational costs and boost employee productivity. He additionally noted that companies are looking at top-line benefits of getting users online faster with greater satisfaction and reduced shopping cart abandonment.

The post The Green Sheet: Passwordless future within reach, experts say appeared first on FIDO Alliance.

AARP: Fraud fighters are working to keep scam “epidemic” at bay

Lori Glavin — Fri, 14 Apr 2023 15:49:41 +0000

Impressive new technology to fight fraud is emerging from businesses. The tech industry association called the FIDO Alliance is working toward replacing passwords — a key vulnerability — with more secure technologies, including biometrics. Executive Director Andrew Shikiar says this could be done for most online passwords within five years.

The post AARP: Fraud fighters are working to keep scam “epidemic” at bay appeared first on FIDO Alliance.

Digital Transactions: Why the password is going extinct

Lori Glavin — Fri, 14 Apr 2023 15:48:46 +0000

Usernames and passwords have been the most common authentication method for digitally accessing an account. However, passwords are vulnerable to compromise through a variety of attack vectors. “Passwords are fundamentally flawed, because they can be hacked, forgotten, and stolen,” says Andrew Shikiar, executive director and chief marketing officer for the FIDO Alliance. “It’s also tough to enter passwords on keyboardless devices. Plus, more than 80% of data breaches can be tracked back to passwords.”

The post Digital Transactions: Why the password is going extinct appeared first on FIDO Alliance.

Futura Sciences: AI breaks most passwords in less than a minute: here are the ones that stand up

Lori Glavin — Fri, 14 Apr 2023 15:47:37 +0000

Researchers from the cybersecurity company Home Security Heroes have trained an AI to decipher millions of passwords. It took less than a minute to find most of them. But the AI stumbles for some passwords. Passkeys are a way to strengthen security.

The post Futura Sciences: AI breaks most passwords in less than a minute: here are the ones that stand up appeared first on FIDO Alliance.

Compare the Cloud: The passwordless future

Lori Glavin — Fri, 14 Apr 2023 15:46:43 +0000

It’s nearly two decades since Bill Gates predicted the passing of the traditional username and password, warning that this archaic security combo simply wasn’t up to the task of keeping information safe and secure in the long term. Passwords will not be around forever and if we are ever to get serious about cyber security and the protection of data, we have to find another way. That’s one of the main reasons why passwordless authentication is gaining so much popularity as a more secure and convenient alternative to traditional passwords. And it seems the industry agrees. Tech giants Apple, Google, and Microsoft announced last May that they would support FIDO2 — authentication specifications based on public key cryptography and international standards — to enable passwordless authentication across devices.

The post Compare the Cloud: The passwordless future appeared first on FIDO Alliance.

Tech Radar: This identity management firm is the first big player to ditch passwords

Emiliano Borzelli — Fri, 24 Mar 2023 16:33:22 +0000

ForgeRock has become the first identity management platform to make the leap into the brave new world of passwordless security. ForgeRock has been implementing passwordless solutions for more than a decade in the consumer realm, and its Identity Platform has deployed passwordless solutions for mobile and web apps. The company already supports FIDO2 WebAuthn standards and passkeys, the foremost technologies currently used in passwordless authentication which are supported by big tech firms such as Apple, Google, Amazon and Meta.

The post Tech Radar: This identity management firm is the first big player to ditch passwords appeared first on FIDO Alliance.

WEB.de: AI fraud with a stolen voice

Emiliano Borzelli — Fri, 24 Mar 2023 16:32:14 +0000

Online providers need to check if and when they use convenient but technically easily surmountable authentication options. Strong access security is offered by the FIDO2 standard, for example, which even allows secure passwordless access.

The post WEB.de: AI fraud with a stolen voice appeared first on FIDO Alliance.

Blog NT: NordPass announces support for passkeys

Emiliano Borzelli — Fri, 24 Mar 2023 16:31:04 +0000

Passkeys are the future of digital security. Password managers such as 1Password, Dashlane and LastPass have already announced support for this new technology. NordPass joins this list this week with support for Passkeys in its application.

The post Blog NT: NordPass announces support for passkeys appeared first on FIDO Alliance.

Biometric Update: HYPR turns smartphones into FIDO2 virtual security keys for passwordless authentication

Emiliano Borzelli — Fri, 24 Mar 2023 15:24:17 +0000

Decentralized authentication firm HYPR has unveiled a new software tool that enables companies to use smartphones as FIDO2 virtual security keys for passwordless authentication.

Called Enterprise Passkeys for Microsoft Azure, the program supports integration with Microsoft Entra. It aims to provide the flexibility and security features of FIDO2 authentication while removing costs associated with hardware security keys.

The post Biometric Update: HYPR turns smartphones into FIDO2 virtual security keys for passwordless authentication appeared first on FIDO Alliance.

Beta Kit: How 1Password plans to build a passwordless future

Emiliano Borzelli — Fri, 24 Mar 2023 15:22:10 +0000

Now in a key 18-month window, 1Password plans to ramp up its shift to passkeys in 2023.

Big Tech companies have recently made headlines by pledging to move away from traditional passwords in favour of a more modern solution: passkeys. But for Anna Pobletts, the advent of passkeys is nothing new.

Two years ago, Pobletts co-founded and was CTO of Austin, Texas-based startup Passage, which focused on making the predecessor to passkeys, an API called WebAuthn, accessible to developers and businesses that were looking to implement passwordless authentication.

In only the second year of its existence, Passage caught the eye of another major player in the authentication space: 1Password, the password manager used by millions and one of Canada’s most valuable tech companies.

The post Beta Kit: How 1Password plans to build a passwordless future appeared first on FIDO Alliance.

Journal du Net: Digital accessibility: Why CIOs should make it a priority

Lori Glavin — Thu, 23 Mar 2023 13:10:01 +0000

In this byline, Andrew Shikiar explains how simple and safe digital accessibility is an essential human right today.

The post Journal du Net: Digital accessibility: Why CIOs should make it a priority appeared first on FIDO Alliance.

L’Eclaireur FNAC: How password managers are preparing for a future … without passwords

Lori Glavin — Thu, 23 Mar 2023 13:09:23 +0000

Passwordless authentication has the potential to continue to grow in 2023. In any case, the tech giants, Microsoft, Google and Apple in the lead, within the FIDO Alliance, are doing everything to ensure that the adoption happens as soon as possible. To quickly summarize what we had already explained previously, authentication without passwords, or passwordless , has, as its name suggests, the purpose of allowing you to connect to sites and services without passwords.

The post L’Eclaireur FNAC: How password managers are preparing for a future … without passwords appeared first on FIDO Alliance.

ComputerWeekly: Accessible authentication: What companies need to consider

Lori Glavin — Thu, 23 Mar 2023 13:08:49 +0000

In this byline, Andrew Shikiar, executive director and CMO of the FIDO Alliance explains the importance of accessible, secure authentication for all.

The post ComputerWeekly: Accessible authentication: What companies need to consider appeared first on FIDO Alliance.

Communications of the ACM: Passkeys unlock a new era for authentication

Lori Glavin — Thu, 23 Mar 2023 13:08:13 +0000

Until recently, replacing passwords has ranked somewhere between tricky and impossible. Passkeys completely eliminate passwords, and while they won’t end cyberattacks, they represent a far more convenient and secure framework to navigate the digital world. “Legacy frameworks, including some forms of two-factor authentication, depend on a human-readable and shared secret. This makes them highly susceptible to attack and relatively easy to bypass,” explains Andrew Shikiar, executive director of the FIDO Alliance.

The post Communications of the ACM: Passkeys unlock a new era for authentication appeared first on FIDO Alliance.

SC Media: What should Musk do to better secure Twitter users after 2FA goes away?

Lori Glavin — Thu, 23 Mar 2023 13:07:35 +0000

While Twitter CEO Elon Musk has defended the move to ban 2FA for non-subscribers as a way to protect user security, most leaders aren’t buying it. “Just from a purely pragmatic standpoint, this is basically stripping away the lowest threshold of 2FA out there without any sort of viable or easy replacement,” said Andrew Shikiar, executive director of the FIDO Alliance. As Shikiar sees it, Twitter could have told users that they’re removing OTP but educating users on passkeys, which are safer and built into Android and iOS devices.

The post SC Media: What should Musk do to better secure Twitter users after 2FA goes away? appeared first on FIDO Alliance.

SC Media: GitHub to roll out 2FA for all contributors starting March 13

Lori Glavin — Thu, 23 Mar 2023 13:07:00 +0000

GitHub will begin its official rollout of two-factor authentication for developers who contribute code on the platform, starting March 13. GitHub added that it will support SMS text messages as a second factor, while testing FIDO Alliance passkeys internally to improve the security posture. “It is true that SMS 2FA can be easily phished by hackers as it relies on knowledge-based credentials. But GitHub recognizes these risks and strongly recommends using security keys and TOTPS wherever possible for greater security – [and] will continue to offer SMS for 2FA – which is better than removing the option entirely,” said Andrew Shikiar, executive director of the FIDO Alliance.

The post SC Media: GitHub to roll out 2FA for all contributors starting March 13 appeared first on FIDO Alliance.

SC Media: What should Musk do to better secure Twitter users after 2FA goes away?

Lori Glavin — Fri, 10 Mar 2023 15:57:03 +0000

In just two weeks, the ban on SMS two-factor authentication for non-subscribers on Twitter will go into effect, a move blasted by the majority of the security community.

While Twitter CEO Elon Musk has defended the move as a way to protect user security, most leaders aren’t buying it.

“Just from a purely pragmatic standpoint, this is basically stripping away the lowest threshold of 2FA out there without any sort of viable or easy replacement,” Andrew Shikiar, executive director of the FIDO Alliance, told SC Media.

The post SC Media: What should Musk do to better secure Twitter users after 2FA goes away? appeared first on FIDO Alliance.

Tech Target: GitHub 2FA plan adds SMS, account lockout safeguards

Lori Glavin — Fri, 10 Mar 2023 15:55:13 +0000

GitHub reaffirmed this week that it is testing passkeys from the FIDO Alliance industry association, which is developing “open standards that are more secure than passwords and SMS OTPs, simpler for consumers to use, and easier for service providers to deploy and manage.” Passkeys use public key cryptography standards to authenticate client devices that are protected using biometrics, such as smartphones, eliminating password-based authentication altogether.

The post Tech Target: GitHub 2FA plan adds SMS, account lockout safeguards appeared first on FIDO Alliance.

Ghacks: How to configure two-step login via FIDO2 WebAuthn in Bitwarden

Lori Glavin — Fri, 10 Mar 2023 15:54:13 +0000

Bitwarden password manager users who want to step up the security may configure two-step login via FIDO2 WehAuthn. The feature is not available for all users or in all Bitwarden apps. This article is designed for Bitwarden users who want to understand what FIDO2 WebAuthn is, how it differs from traditional two-factor authentication systems, and how to set it up on Bitwarden.

The post Ghacks: How to configure two-step login via FIDO2 WebAuthn in Bitwarden appeared first on FIDO Alliance.

The Mover: Expect the Unexpected: Top cybersecurity predictions for 2023

Lori Glavin — Fri, 10 Mar 2023 15:33:25 +0000

Due to rapid developments in both safe and harmful technology, cybersecurity is among the most volatile industries. However, we can still identify certain trends affecting the industry. From passwordless solutions broadly available to consumers, to the first real-life cases of automotive hacking, all of these are likely to shape the cybersecurity landscape in 2023. 2022 marks the year when the passwordless future idea experienced its first big wins, and 2023 is expected to be even more fruitful. Many progressive companies are likely to adopt the new passkeys technology, supported by the FIDO (Fast Identity Online) Alliance. Tech giants such as Microsoft, Apple, and Google have already announced their commitment to delivering passwordless logins and even introduced their first efforts to consumers.

The post The Mover: Expect the Unexpected: Top cybersecurity predictions for 2023 appeared first on FIDO Alliance.

ComputerWeekly: How ForgeRock is tackling identity management

Lori Glavin — Fri, 10 Mar 2023 15:32:26 +0000

ForgeRock CEO Fran Rosch has set the identity and access management software supplier on a path to deliver a frictionless identity experience without compromising security or privacy. The article mentions how FIDO standards can tackle the bad experiences users can have with classic authentication systems.

The post ComputerWeekly: How ForgeRock is tackling identity management appeared first on FIDO Alliance.

Sciences et Avenir: The dream of a passwordless Internet

Lori Glavin — Fri, 10 Mar 2023 15:31:41 +0000

The Passkey system used by Apple or Google enables simple and secure online authentication. However, other studies by cyber security experts are less concerned with removing passwords than with strengthening them with additional methods.

The post Sciences et Avenir: The dream of a passwordless Internet appeared first on FIDO Alliance.

IAVC World: Cloud & Security: What IT resellers and CSPs need to do now

Lori Glavin — Fri, 10 Mar 2023 15:23:24 +0000

For many years, Microsoft has offered the possibility to reliably protect accesses from takeovers using multi-factor authentication (MFA) and Fast Identity Online (FIDO). In addition to MFA and FIDO2, Microsoft has recently started offering authentication using certificates in Azure AD. With FIDO Passkey, passwordless authentication can even be realised in Azure AD.

The post IAVC World: Cloud & Security: What IT resellers and CSPs need to do now appeared first on FIDO Alliance.

Dashlane Blog: Dashlane Passkey Support Coming to Android

Lori Glavin — Fri, 03 Mar 2023 17:55:46 +0000

If you use a dedicated password manager, such as Dashlane, you’ll probably expect it to manage your passkeys for you, just as it does with your passwords. Unlike passwords, the mechanism passkeys use is more sophisticated under the hood, though this isn’t apparent in the user experience; passkeys are actually much simpler than passwords to create and use. Dashlane has been at the forefront of passkey support since passkeys were announced last year. In August, Dashlane introduced integrated passkey support in our security-first password manager and unveiled the first in-browser passkey solution.

The post Dashlane Blog: Dashlane Passkey Support Coming to Android appeared first on FIDO Alliance.

Politico Pro: Call for Regs Exposes Divides in White House and On Hill

Lori Glavin — Fri, 03 Mar 2023 17:54:42 +0000

Senator Wyden is urging the Senate sergeant at arms to mandate that lawmakers and Hill staff use an industry-standard security practice to access sensitive Senate networks, per a Friday letter shared first with MC. “Thousands of Senate employees who currently use less-secure forms of MFA must be re-issued new, phishing-resistant FIDO tokens and the Senate must stop supporting methods of MFA that are vulnerable to phishing,” reads the letter.

The post Politico Pro: Call for Regs Exposes Divides in White House and On Hill appeared first on FIDO Alliance.

Tech Radar: Android 14 might get rid of passwords for good

Lori Glavin — Fri, 03 Mar 2023 17:51:38 +0000

As Dashlane puts it, “Passkeys are phishing-resistant credentials based on FIDO standards and are the future of online authentication, designed as a more secure and user-friendly replacement for passwords.” FIDO is the alliance that sets the standards for passwordless technologies, and passkeys need to comply with its WebAuthn specifications. It has the backing of all the big tech players – Apple, Google, Microsoft, Meta, Amazon and so on.

The post Tech Radar: Android 14 might get rid of passwords for good appeared first on FIDO Alliance.

Tech Radar: This year’s newest and most dangerous cyber attack techniques

Lori Glavin — Fri, 03 Mar 2023 17:50:40 +0000

There is continued movement away from using multiple use passwords and towards adopting multifactor authentication (MFA), passkeys, FIDO 2 authentication and other additional layers of security. Companies like Apple and Google are also developing their own authentication token systems.

The post Tech Radar: This year’s newest and most dangerous cyber attack techniques appeared first on FIDO Alliance.

ChannelPartner: Cloud and Security 2023

Lori Glavin — Fri, 03 Mar 2023 17:49:27 +0000

For many years, Microsoft has been offering the option of reliably protecting access from takeovers using multi-factor authentication (MFA) and Fast Identity Online (FIDO). In addition to MFA and FIDO2, Microsoft has recently also offered authentication using certificates in Azure AD, which opens up new possibilities for using cloud services.

The post ChannelPartner: Cloud and Security 2023 appeared first on FIDO Alliance.

L’Eclaireur Fnac: Dashlane is moving forward with passkeys and becoming more transparent

Lori Glavin — Fri, 03 Mar 2023 17:48:37 +0000

Dashlane was one of the first tools to support passkeys for the FIDO Alliance. The famous password manager is making some changes in its strategy and intends to expand its access to passkeys.

The post L’Eclaireur Fnac: Dashlane is moving forward with passkeys and becoming more transparent appeared first on FIDO Alliance.

Global Security Mag: FIDO Alliance announces its “Authenticate 2023” conference

Lori Glavin — Fri, 03 Mar 2023 17:47:24 +0000

The FIDO Alliance is pleased to announce the return of Authenticate, the only industry conference dedicated to all aspects of user authentication – including a focus on FIDO-based sign-ins.

The post Global Security Mag: FIDO Alliance announces its “Authenticate 2023” conference appeared first on FIDO Alliance.

Professional Security Magazine Online: Password posers

Lori Glavin — Fri, 24 Feb 2023 14:36:28 +0000

It is hard to imagine a world without passwords. They remain the most-used authentication method for consumers according to the Fast IDentity Online (FIDO) Alliance’s annual Online Authentication Barometer, despite the fact that passwords almost universally fail at keeping accounts secure and preserving a smooth user experience. The death of the password will be a huge relief for users, removing the need to remember or type passwords and enabling better user experiences. For organisations, the upsides are just as powerful, with a passwordless future offering better improved security, reduced risk of data breaches and lower support costs. As we enter the new year, 2023 seems set to be the year when passwords finally become an endangered species.

The post Professional Security Magazine Online: Password posers appeared first on FIDO Alliance.

Schieb: Passkey instead of password: FIDO Keys

Lori Glavin — Fri, 24 Feb 2023 14:35:38 +0000

Passwords are actually obsolete: they are insecure, impractical and easy to crack/steal. There have long been better methods of securing online accounts. Above all: Passkeys.

The post Schieb: Passkey instead of password: FIDO Keys appeared first on FIDO Alliance.

L’Éclaireur Fnac: How Password Managers Are Preparing for a Future…Without Passwords

Lori Glavin — Fri, 24 Feb 2023 14:34:50 +0000

The post L’Éclaireur Fnac: How Password Managers Are Preparing for a Future…Without Passwords appeared first on FIDO Alliance.