Glossary

FIDO2

The FIDO Alliance’s specifications for passwordless, phishing-resistant authentication: W3C WebAuthn for the browser and platform API, and CTAP for talking to external authenticators such as security keys. Passkeys are FIDO2 credentials.

Defined in: FIDO Alliance: FIDO2

Covered in

Guide

Passkeys and MFA: WebAuthn enrollment, sign-in and replacement

Register, verify and replace passkeys with WebAuthn so phishing resistance survives the account’s whole lifecycle, and map passkeys and other MFA methods to the NIST SP 800-63B-4 assurance levels.