NIST issues guidance to fit passkeys into digital identity recommendations

The U.S. National Institute and Standards Institute has published a supplement to its digital identity guidelines as interim advice for agencies to use authenticators like passkeys that work across different devices.

The “Incorporating syncable authenticators” supplement to NIST SP 800-63B Digital Identity Guidelines: Authentication and Lifecycle Management, provides guidance on using these authenticators, which are typically but not necessarily passkeys, in enterprise or public-facing applications.

It comes in recognition of the phishing-resistant security provided by passkeys, but also …

aal2 access control advice apexanalytix authentication authenticators biometric-authentication biometric r&d biometrics biometrics news devices digital digital-identity fido alliance guidance guidelines identity lifecycle lifecycle management management national nist passkeys recommendations standards versasec work