MFA and passkeys
2 guides tagged MFA and passkeys, grouped by topic, with the SDLC phase and role each is written for.
- SDLC phases
Identity & cryptography
2 guidesGuide · Identity & cryptography
Passkeys and MFA: WebAuthn enrollment, sign-in and replacement
Register, verify and replace passkeys with WebAuthn so phishing resistance survives the account’s whole lifecycle, and map passkeys and other MFA methods to the NIST SP 800-63B-4 assurance levels.
Development · Developers
Guide · Identity & cryptography
Stop account takeover with the right MFA and login defenses
Rank MFA options by the attacks they stop, implement TOTP and push approvals correctly, and close the login, reset and recovery paths that attackers use instead of breaking the second factor.
Development · Developers, AppSec engineers