FIDO2

ELI5 — The Vibe Check

FIDO2 is the whole framework that makes passwordless authentication work — WebAuthn (browser side) plus CTAP (authenticator side). It's the standard that security keys like YubiKey and platform authenticators like Touch ID all speak. Think of it as the USB standard but for authentication.

Real Talk

FIDO2 is an authentication standard comprising WebAuthn (browser/server API) and CTAP2 (Client to Authenticator Protocol). It enables passwordless, phishing-resistant authentication using public-key cryptography. Supported by all major browsers and platforms, with credentials that can be device-bound or synced.

When You'll Hear This

"FIDO2 security keys are mandatory for our admin accounts." / "FIDO2 combines WebAuthn and CTAP2 — the browser API and the authenticator protocol."