#FIDO2

Extending #FIDO2 beyond account #security into full operating system hardening. Get the info from this #oSC26 talk. #Linux

Bad news for red teamers: Microsoft Entra ID now detects the WebAuthn / #FIDO2 assertion replay attack. As a result, two of the attack vectors I demonstrated in my #BHUSA "Pass-the-Passkey Family of Attacks" talk no longer work. Luckily, the remaining 18 are unaffected.

FIDO's 2026 Passkey Index finds passkeys used in an average 36% of successful sign-ins, up from 26%, among participants reporting usage. Passkey sign-ins succeeded 93% of the time vs 78% for passwords and MFA. #passkeys #passwordless

You asked, we delivered! All @ProtonPrivacy mobile apps now support #FIDO2 for #2FA. 🎉 Use security keys like YubiKey for an extra layer of protection. Here’s how:

Can't afford a #FIDO2 token for two-factor authentication? Afraid of losing account access when you lose your token? We've got you covered. With FeIDo, to appear at @ACM_CCS '22, you can use your eID + phone for FIDO-compatible, attribute-based #2FA. No need for a h/w token! 🧵

Phishing can't steal a key. Coming soon to Dynamiccom: SecuX PUFido Clife Key, USB-C FIDO2 + U2F security key, 8 g, PUF chip. Orders open soon. | #SecuX #FIDO2

Question for my Identity friends out there. When using #FIDO keys for authentication, what do you do about lost/stolen keys? Can they be revoked? #FIDO2

Did you know? 🤔 You can securely log into @Proton_Pass on Android and iOS using #FIDO2 for two-factor authentication (#2FA).

Big news from the Future Technology Team: Tumbleweed & @OMicroos are evolving with full disk #encryption via #TPM + #FIDO2, smarter update tools, new image defaults, systemd‑pull & sysext, and handy new tools like #sndiff. Dive in!

##openSUSE Tumbleweed now uses systemd-boot as default for NEW installations! Better# FDE integration with #TPM2 / #FIDO2, simpler boot management via BLS. Existing systems stay on GRUB..#Linux

NEWS: #LastPass has achieved #FIDO2 certification of its servers. Read more about this milestone.

What is #FIDO2 and why should you definitely want it? FIDO is an alliance made up of many leading software and hardware organizations, including #Microsoft, #Google and #Apple. The goal is to develop #passwordless #authentication standards. Such as FIDO2. FIDO2 are keys where a user's account is tied directly to an authentication authority. This makes FIDO2 authentication #phishing-resistant because it will only work on the real authentication site, not on a fraudulent site. Public and private key based cryptography is used for authentication. During registration, a new private and public key pair is created locally on the FIDO2 device. The private key remains stored on the device and never leaves it. The public key is sent to the given online authentication service. Authentication is done by the client device proving possession of the private key to the service by signing a challenge. The client's private keys can be used only after they are unlocked locally on the device by the user - swiping a finger, entering a PIN, etc. You don't have to enter your username or any password when logging in - so it's very convenient and very secure. Each saved account has its own private and public key pair. You can have multiple accounts on one FIDO2 device, possibly dozens. You can even have multiple accounts for a single service, and when you log in, you just select which account you want to use to log in. FIDO2 are physical devices, usually cool little USB devices that you can carry around on your keys, for example. Optionally, they can also be equipped with NFC (for authentication on mobile phones, for example) or perhaps a fingerprint reader for better security. Prices range from a few dozens of US dollars.

If you’re a developer interested in digital identity, bookmark these. 1. W3C Verifiable Credentials — digital credential standards 2. OpenID Foundation — identity and authentication specifications 3. FIDO Alliance — passwordless authentication standards 4. OAuth 2.0 — delegated authorisation 5. OpenID Connect — identity layer built on OAuth 2.0 6. NIST Digital Identity Guidelines — identity proofing and authentication guidance Identity verification, authentication and authorisation are different things. Learn the difference before designing your authentication system.

📲 La #MFA es un paso fundamental, pero no el único. Cerramos esta serie del blog del #ClubCISO analizando las mejores prácticas para fortalecer la #autenticación en un entorno cada vez más exigente. 🔗

🛑Pero esto no acaba aquí. Muy pronto ampliaremos esta serie con un documento exclusivo que abordará los próximos desafíos de la autenticación: amenazas avanzadas, #FIDO2, #passwordless y recomendaciones para construir modelos de identidad más resilientes.

🔐 No more passwords. Ever again. In this new video, Alex shows you how to use Pocket ID (a self-hosted, open source passkey provider) to log in to your Tailscale tailnet—no passwords required. Watch here: #Passkeys #Tailscale #FIDO2 #SelfHosted

We have been nominated for FinTech of the Year and FinTech Start-Up of the Year at the Digital Impact Awards Africa 2026. Vote for Fido in both categories: #DIAA2026 #FidoCreditUganda

Strengthen your #security profile by adding authentication with #FIDO2 security keys for your password manager.

FIDO 2 3本目。なんぼあってもええもんですからね Titan Security Key (Google Cloud

Authentication Myths & Realities Myth:4 • FIDO2 Security Keys are difficult to use & manage. Reality: • Ensurity FIDO2 solutions are easy to Use & Manage. #FIDO2 #Passwordless #SecureAuthentication #myths #reality #ThinC_AUTH #cybersecurity @KEnsurity @amit_CyberSec

Passwords are easy to "hack". Just in time for the #CitrixSecuritySummit my friend @nitinsharma_1 talks to me about a future where passwords don't exist. What in the world of mother's maiden name? #FIDO2 #Microsoft ADC ^@SeanDo40