The W3C standards group has certified WebAuthn as an official web standard. WebAuthn enables web site logins that are both easier and more secure than passwords.
Multiple authentication methods are supported, including biometric options on mobile devices, such as fingerprint readers. It’s already supported in Android, Chrome, Firefox, Edge, and the preview version of Apple Safari.
With FIDO2 and WebAuthn, the global technology community has come together to provide a shared solution to the shared password problem. FIDO2 addresses all of the issues with traditional authentication:
- Security: FIDO2 cryptographic login credentials are unique across every website, biometrics or other secrets like passwords never leave the user’s device and are never stored on a server. This security model eliminates the risks of phishing, all forms of password theft and replay attacks.
- Convenience: Users log in with convenient methods such as fingerprint readers, cameras, FIDO security keys, or their personal mobile device.
- Privacy: Because FIDO keys are unique for each Internet site, they cannot be used to track you across sites.
- Scalability: websites can enable FIDO2 via simple API call across all supported browsers and platforms on billions of devices consumers use every day.
“Web Authentication as an official web standard is the pinnacle of many years of industry collaboration to develop a practical solution for stronger authentication on the web,” said Brett McDowell, executive director of the FIDO Alliance. “With this milestone, we’re moving into a new era of ubiquitous, hardware-backed FIDO Authentication protection for everyone using the internet.”
The standard enables biometric web site login on both desktop and mobile browsers, and also enables using your phone as an authentication tool to log into web sites on a desktop/laptop
