What is FIDO2 authentication?

FIDO2 is a modern authentication standard, based on W3C WebAuthn and the FIDO Alliance CTAP, that enables passwordless login using biometrics or hardware security keys instead of passwords; its credentials are commonly known as passkeys.

Why is FIDO2 more secure than passwords?

Because it uses public-key cryptography and binds each credential to the legitimate site’s origin, so it cannot be replayed on a look-alike phishing site, and there is no shared password to steal, guess or reuse.

What do you need to use FIDO2?

A FIDO2-compatible authenticator, such as a security key or a device with biometrics or a PIN, and a service that supports the standard.

FIDO2 Authentication - Glossary

FIDO2 is an open authentication standard developed by the FIDO Alliance and the W3C that enables passwordless or strong multi-factor authentication using public-key cryptography. Users authenticate through biometric sensors (fingerprint or facial recognition), hardware security keys (such as YubiKeys) or platform authenticators built into their devices, eliminating the need for passwords that can be phished, leaked or brute-forced.

FIDO2 authentication is increasingly recommended by compliance frameworks and security authorities as a best practice for protecting against credential-based attacks, which remain one of the most common attack vectors. By implementing FIDO2, organisations significantly reduce the risk of phishing, credential stuffing and account takeover attacks while improving the user experience through seamless, passwordless login flows that meet the strong authentication requirements of ISO 27001 and NIS2.

Frequently asked questions

What is FIDO2 authentication?: FIDO2 is a modern authentication standard, based on W3C WebAuthn and the FIDO Alliance CTAP, that enables passwordless login using biometrics or hardware security keys instead of passwords; its credentials are commonly known as passkeys.
Why is FIDO2 more secure than passwords?: Because it uses public-key cryptography and binds each credential to the legitimate site’s origin, so it cannot be replayed on a look-alike phishing site, and there is no shared password to steal, guess or reuse.
What do you need to use FIDO2?: A FIDO2-compatible authenticator, such as a security key or a device with biometrics or a PIN, and a service that supports the standard.

FIDO2 Authentication

A

B

C

D

E

F

G

H

I

J

K

L

M

N

O

P

Q

R

S

T

U

V

W

Z

Frequently asked questions