thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Intermediate

FIDO2

FIDO Alliance and W3C standard for phishing-resistant, public key-based passwordless authentication.

Definition

FIDO2 consists of the W3C WebAuthn browser API and the FIDO Alliance's Client to Authenticator Protocol (CTAP). Authenticators create a unique key pair per site, keep the private key on the device, and sign challenges that are bound to the website's origin. No shared secrets are stored on the server.

Example

A user registers a YubiKey with a cloud service, which stores only the public key for that account.

Exam tip

FIDO2 = WebAuthn + CTAP; it is phishing-resistant because of origin binding.

Related terms