This document introduces FIDO, a passwordless authentication standard that provides more secure login than legacy multi-factor authentication and PKI methods. It works by registering devices, then allowing login through those registered devices without the need for passwords, SMS codes, or other single-use tokens. FIDO authentication is standardized across major vendors, decentralized by using local devices for authentication rather than centralized assets, and resistant to phishing since it doesn't rely on shared secrets, biometrics, or passwords.
4. How does it compare to legacy MFA and
PKI strong authentication.
1. Standardized and supported by all major vendors - no third party client SW needed!
2. Not phishable compared to other MFA methods: SMS, push, OTP tokens, mobile
authenticators.
3. Enables local on-device decentralized authentication with high privacy and no
centralized toxic assets (no shared secrets, biometrics, passwords)
■ Self-provisioned
■ Extendable to use cases beyond basic authentication (eID, blockchain etc.)
PETER KOLAROV CEO CRAYONIC.COM
