They then worked within the W3C to finalize the API, which became known as Web Authentication, or WebAuthn. This standardization would grow the FIDO ecosystem by an entire community of web browsers and web application servers supporting the standard.įIDO Alliance member companies submitted the FIDO specifications to the W3C for formal standardization in 2015. The FIDO Alliance decided to partner with the World Wide Web Consortium (W3C), the international standards organization for the World Wide Web, to standardize FIDO Authentication for the entire web platform.

The Alliance developed three technical specifications that defined a web-based API, enabling FIDO Authentication to be built directly into browsers and platforms. Understanding the relationship between FIDO Alliance and WebAuthnĪfter the release of its initial FIDO UAF and FIDO U2F specifications, the FIDO Alliance started a new journey to make FIDO Authentication more accessible to users worldwide.

This security model eliminates the risks of phishing, all forms of password theft and replay attacks. Web services and apps can – and should – turn on this functionality to give their users an easier login experience via biometrics, mobile devices and/or FIDO security keys – and with much higher security over passwords alone.įIDO’s higher security comes from the use of cryptographic login credentials that are unique across every website, never leave the user’s device and are never stored on a server.

FIDO2 enables users to leverage common devices to easily authenticate to online services in both mobile and desktop environments.

Web Authentication (WebAuthn), a core component of FIDO Alliance’s FIDO2 set of specifications, is a web-based API that allows websites to update their login pages to add FIDO-based authentication on supported browsers and platforms.

Fido 2 key