FIDO2-DETAIL

FIDO Alliance passwordless authentication.

Definition

FIDO2 uses public key cryptography: authenticator generates a per-site keypair, registration sends public to server, authentication signs a challenge with the private key. Phishing-resistant via origin-binding. Platform Authenticator (device-integrated) or Roaming Authenticator (USB/NFC/BLE).

Origin

FIDO Alliance founded 2013 ; FIDO U2F in 2014 ; FIDO2 published December 2018.

Example in context

A Microsoft employee logs into Office 365 with Windows Hello (FIDO2 platform authenticator), no password.

Related terms

• WebAuthn — FIDO2 browser component.