Passkeys standard: Time to add it to your dev plans?

Passkeys, child of FIDO and W3C’s WebAuthn, looks almost ready for prime time. Apple and Google are supporting it — and being interoperable. Password managers are also getting on board.

2FA/MFA is great in theory, but OTP codes can be intercepted and websites are easily spoofed. Passkeys neatly automates a challenge/response exchange, with the secret being protected by biometrics.

Isn’t it time your dev team got on board, too? In this week’s Secure Software Blogwatch, we get below the …

2fa apple board child dev fido google great managers mfa otp passkeys password password managers plans prime spoofed standard theory w3c webauthn websites