FIDO2 is the latest set of specifications from the FIDO Alliance, enabling passwordless authentication across all browsers and platforms.

What is FIDO2?

FIDO2 consists of two main components: WebAuthn (a W3C standard) and CTAP (Client to Authenticator Protocol). Together, they enable strong, passwordless authentication.

Benefits of FIDO2

• Phishing Resistant: Credentials are bound to the origin, making phishing attacks impossible.
• No Shared Secrets: Private keys never leave the authenticator device.
• User Friendly: Simple touch or biometric verification replaces complex passwords.
• Privacy Preserving: Each site gets a unique key pair; no tracking is possible.

How It Works

During registration, the authenticator creates a unique public/private key pair. The public key is sent to the server, while the private key remains securely stored in the authenticator.

During authentication, the server sends a challenge. The authenticator signs this challenge with the private key, and the server verifies it with the stored public key.

Getting Started

To implement FIDO2 in your organization, you'll need compatible authenticators (like YubiKeys) and a server that supports WebAuthn. Contact us for a proof of concept!