How FIDO Webauthn Works

 

In recent years, the cybersecurity industry has experienced a significant increase in websites losing consumer data to bad actors. There have been many account takeover fraud losses, and leading customer facing companies such as Google have experienced massive data security breaches. With the fundamental loss in consumer trust and millions in lost revenue, it is important for companies to take a second look at their approach to protecting their users.

In March 2019, the World Wide Web Consortium (W3C) announced that FIDO WebAuthn is now the official web standard for password-free login. With support from a broad set of applications, widespread adoption of WebAuthn is expected in the coming years.

With this new standard, any web application that runs in a browser that supports WebAuthn can now take advantage of these authenticators to securely authenticate users. Mozilla Firefox, Google Chrome, Microsoft Edge, Apple Safari, Opera, and rapid adoption by platforms (such as MSFT Edge with Windows Hello, Google Android), means there is finally a practical way to deploy FIDO WebAuthn.

In the past, there was a lack of supported browsers as well as platforms, and this was a huge impediment to the adoption of U2F. Nowadays, organizations can deploy with external tokens such as YubiKeys or through supported platforms themselves because the device itself is used for WebAuthn.

FIDO WebAuthn has many positive side effects for both users and businesses. Apart from the fact that there are better user experiences possible with WebAuthn (passwordless login, for example), the businesses and consumers alike can benefit from better security as well as a decrease in the type of attacks that can be used against them. For those running businesses, using WebAuthn means that automated, cross-site password attacks such as password spraying or password stuffing cannot be used against their websites.

For more information on FIDO WebAuthn, visit our website at https://loginid.io/

Comments

Popular posts from this blog

The Benefits of implementing Digital Identity Verification in your Business

The Benefits of Digital Identity Verification

The Benefits of Digital Signature Authentication