Technical articles, standards guidance, and community insight on IAM, PAM, and Zero Trust.
FIDO & PasskeysThe Challenge The National Cyber Security Centre (NCSC) faced a persistent authentication issue: traditional password guidance wasn t effective. Despite warnings against weak passwords and promoting p
FIDO & PasskeysScope This guide covers the technical fundamentals, implementation requirements, and operational considerations for deploying passkey authentication in enterprise environments. It s designed for IAM a
FIDO & PasskeysThe FIDO Alliance has announced two working groups focused on AI agentic commerce. If you re an IAM architect, you re likely fielding questions from product teams about allowing AI agents to transact
FIDO & PasskeysWith 5 billion passkeys in use and 68% of organizations deploying them for workforce authentication, you d think we d have it figured out. We haven t. The gap between passkeys are live and passkeys ac
Get weekly security insights and compliance updates delivered to your inbox.
FIDO & PasskeysThe Conventional Wisdom With WebAuthn Level 3 now a W3C Recommendation, you might think it s time to roll out passkeys at scale. The standard is stable, features are robust, and major platforms have i
FIDO & PasskeysMicrosoft has made passkeys the default authentication method for Entra ID as of September 1. By February 1, 2027, SMS and voice authentication will be phased out. If you re an IAM architect planning
FIDO & PasskeysScope This guide outlines the technical and operational steps for implementing passwordless authentication while securing account recovery flows, which become your primary vulnerability surface. It s
FIDO & PasskeysSingapore s deployment numbers tell a striking story: 80% awareness, 65% adoption, and one in seven consumers who ve experienced a breach in the past year. The FIDO Alliance reports 5 billion passkeys
FIDO & PasskeysWhat Changed Amazon s passkey deployment has reached a significant milestone: 465 million customers now authenticate without passwords. This isn t a pilot program or an obscure option. It s the defaul
FIDO & PasskeysYour Windows and macOS endpoints went passwordless six months ago, but your developers still SSH into production servers with passwords. This inconsistency isn t just a gap; it s a direct path to your
FIDO & PasskeysYou ve read the compliance memo. Your board wants phishing-resistant authentication . You ve allocated budget for FIDO2 . Yet, six months later, you re still running SMS one-time passwords alongside a
FIDO & PasskeysYou ve deployed FIDO2 passkeys . Your vendor promised interoperability. Your pilot users love not typing passwords. Then a contractor with a different device manufacturer can t authenticate, or your m
FIDO & PasskeysYour team has approved passwordless authentication, choosing FIDO2 . Now, you need a repeatable enrollment process that works for 500 users or 5,000. This script automates passkey registration while m
FIDO & PasskeysYou re getting questions about passkeys. Your security team wants to know if they re ready. Your developers are asking how they work. Your CISO is asking what happens to your existing MFA stack. These
FIDO & PasskeysWhat Happened The authentication model that s protected enterprise systems for two decades has hit a breaking point. Organizations have treated identity verification as a one-time event: check credent
FIDO & PasskeysMicrosoft s decision to make passkeys the default authentication method in Entra ID and Google s integration of FIDO2 security keys for Google Workspace users Windows login marks a pivotal shift in en
FIDO & PasskeysYou ve read the NCSC announcement. FIDO2 credentials are more secure than traditional multi-factor authentication against common attacks. Your CISO forwarded the paper. Your board is asking questions.
FIDO & PasskeysYou re facing a decision that affects every authentication flow in your organization: how aggressively should you move toward passwordless authentication with passkeys ? The FIDO Alliance reports that
FIDO & PasskeysThe question isn t whether to adopt passkeys . With 93 percent of organizations on the adoption path and 65 percent reporting high technical familiarity, the technology is well understood. The real qu
FIDO & PasskeysOpenAI s September 1 deadline for hardware-backed passkeys in its Trusted Access for Cyber program isn t just policy housekeeping. It s a critical shift for organizations handling sensitive capabiliti
