Datasec Joins the Fido Alliance

FIDO Authentication provides a simpler user experience with phishing-resistant security

With FIDO Authentication, users sign in with phishing resistant credentials, called passkeys. Passkeys can be synced across devices or bound to a platform or security key and enable password-only logins to be replaced with secure and fast login experiences across websites and apps.

Passkeys are more secure than passwords and SMS OTPs, simpler for consumers to use, and easier for service providers to deploy and manage.

  • FIDO allows users to simply sign in with passkeys across their devices with a biometric or a security key

  • Passkeys provide a secure and simple alternative to passwords. Passwords that are prone to theft and re-use.

  • Organizations can deploy FIDO sign-ins with passkeys across a variety of use cases. Passkeys enable users to access their FIDO sign-in credentials on many of their devices, even new ones, without having to re-enroll every device on every account. Alternatively, device-bound passkeys that are bound to a FIDO security key or platform are an option for organizations that do not require syncing.

  • The user experience will be familiar and consistent across many of the user’s devices – a simple verification of their fingerprint or face, or a device PIN, the same simple action that consumers take multiple times each day to unlock their devices.

  • Passkeys are based on FIDO Authentication, which is proven to be resistant to threats of phishing, credential stuffing and other remote attacks. Also, service providers can offer passkeys without needing passwords as an alternative sign-in or account recovery method.

  • With passkeys, users do not need to enroll a new FIDO credential on each service or each new device (which would typically be with a password for that first sign-in). The users’ passkeys are available whenever they need them—even if they replace their device. Device-bound passkeys that do not support syncing are an option for organizations that require additional proof of provenance of a user’s passkeys.