{"id":49212,"date":"2022-05-10T13:32:52","date_gmt":"2022-05-10T05:32:52","guid":{"rendered":"http:\/\/www.upgrademag.com\/web\/?p=49212"},"modified":"2022-05-10T13:32:54","modified_gmt":"2022-05-10T05:32:54","slug":"apple-google-microsoft-commit-to-expanded-support-for-fido-standard-to-accelerate-availability-of-passwordless-sign%e2%80%91ins","status":"publish","type":"post","link":"http:\/\/www.upgrademag.com\/web\/2022\/05\/10\/apple-google-microsoft-commit-to-expanded-support-for-fido-standard-to-accelerate-availability-of-passwordless-sign%e2%80%91ins\/","title":{"rendered":"Apple, Google, Microsoft commit to expanded support for FIDO standard to accelerate availability of passwordless sign\u2011ins"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>In a joint effort to make the web more secure and usable for all, Apple, Google, and Microsoft announced plans to expand support for a common passwordless sign-in standard created by the FIDO Alliance and the World Wide Web Consortium. <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The new capability will allow websites and apps to offer consistent, secure, and easy passwordless sign-ins to consumers across devices and platforms.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Password-only authentication is one of the biggest security problems on the web, and managing so many passwords is cumbersome for consumers, which often leads consumers to reuse the same ones across services. This practice can lead to costly account takeovers, data breaches, and even stolen identities. While password managers and legacy forms of two-factor authentication offer incremental improvements, there has been industry-wide collaboration to create sign-in technology that is more convenient and more secure.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The expanded standards-based capabilities will give websites and apps the ability to offer an end-to-end passwordless option. Users will sign in through the same action that they take multiple times each day to unlock their devices, such as a simple verification of their fingerprint or face, or a device PIN. This new approach protects against phishing and sign-in will be radically more secure when compared to passwords and legacy multi-factor technologies such as one-time passcodes sent over SMS.\u00a0<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">An Expansion of Passwordless Standard Support&nbsp;<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Hundreds of technology companies and service providers from around the world worked within the FIDO Alliance and W3C to create the passwordless sign-in standards that are already supported in billions of devices and all modern web browsers. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Apple, Google, and Microsoft have led development of this expanded set of capabilities and are now building support into their respective platforms.These companies\u2019 platforms already support FIDO Alliance standards to enable passwordless sign-in on billions of industry-leading devices, but previous implementations require users to sign in to each website or app with each device before they can use passwordless functionality. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Today\u2019s announcement extends these platform implementations to give users two new capabilities for more seamless and secure passwordless sign-ins:\u00a0<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>Allow users to automatically access their FIDO sign-in credentials (referred to by some as a \u201cpasskey\u201d) on many of their devices, even new ones, without having to reenroll every account.<\/li><li>Enable users to use FIDO authentication on their mobile device to sign in to an app or website on a nearby device, regardless of the OS platform or browser they are running.<\/li><\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">In addition to facilitating a better user experience, the broad support of this standards-based approach will enable service providers to offer FIDO credentials without needing passwords as an alternative sign-in or account recovery method.These new capabilities are expected to become available across Apple, Google, and Microsoft platforms over the course of the coming year.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-style-large is-layout-flow wp-block-quote-is-layout-flow\"><p>\u201c\u2018Simpler, stronger authentication\u2019 is not just FIDO Alliance\u2019s tagline \u2014 it also has been a guiding principle for our specifications and deployment guidelines. Ubiquity and usability are critical to seeing multi-factor authentication adopted at scale, and we applaud Apple, Google, and Microsoft for helping make this objective a reality by committing to support this user-friendly innovation in their platforms and products,\u201d said Andrew Shikiar, executive director and CMO of the FIDO Alliance. \u201cThis new capability stands to usher in a new wave of low-friction FIDO implementations alongside the ongoing and growing utilization of security keys \u2014 giving service providers a full range of options for deploying modern, phishing-resistant authentication.\u201d<\/p><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cThe standards developed by the FIDO Alliance and World Wide Web Consortium and being led in practice by these innovative companies is the type of forward-leaning thinking that will ultimately keep the American people safer online. I applaud the commitment of our private sector partners to open standards that add flexibility for the service providers and a better user experience for customers,\u201d said Jen Easterly, Director of the U.S. Cybersecurity and Infrastructure Security Agency. \u201cAt CISA, we are working to raise the cybersecurity baseline for all Americans. Today is an important milestone in the security journey to encourage built-in security best practices and help us move beyond passwords. Cyber is a team sport, and we\u2019re pleased to continue our collaboration.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cJust as we design our products to be intuitive and capable, we also design them to be private and secure,\u201d said Kurt Knight, Apple\u2019s Senior Director of Platform Product Marketing. \u201cWorking with the industry to establish new, more secure sign-in methods that offer better protection and eliminate the vulnerabilities of passwords is central to our commitment to building products that offer maximum security and a transparent user experience \u2014 all with the goal of keeping users\u2019 personal information safe.\u201d\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cThis milestone is a testament to the collaborative work being done across the industry to increase protection and eliminate outdated password-based authentication,\u201d said Mark Risher, Senior Director of Product Management, Google. \u201cFor Google, it represents nearly a decade of work we\u2019ve done alongside FIDO, as part of our continued innovation towards a passwordless future. We look forward to making FIDO-based technology available across Chrome, ChromeOS, Android and other platforms, and encourage app and website developers to adopt it, so people around the world can safely move away from the risk and hassle of passwords.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cThe complete shift to a passwordless world will begin with consumers making it a natural part of their lives. Any viable solution must be safer, easier, and faster than the passwords and legacy multi-factor authentication methods used today,\u201d says Alex Simons, Corporate Vice President, Identity Program Management at Microsoft. \u201cBy working together as a community across platforms, we can at last achieve this vision and make significant progress toward eliminating passwords. We see a bright future for FIDO-based credentials in both consumer and enterprise scenarios and will continue to build support across Microsoft apps and services.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Faster, easier, and more secure sign\u2011ins will be available to consumers across leading devices and platforms.<\/p>\n","protected":false},"author":6,"featured_media":49213,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19],"tags":[3364,337,3362,96,2727,1656],"class_list":["post-49212","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-headlines","tag-apple","tag-google","tag-microsoft","tag-technology","tag-technology-adaption","tag-technology-investment"],"_links":{"self":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/49212","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/comments?post=49212"}],"version-history":[{"count":0,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/49212\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media\/49213"}],"wp:attachment":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media?parent=49212"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/categories?post=49212"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/tags?post=49212"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}