Windows 10: using a FIDO/oauth2 security key as the second form of authorization

Turn Two1 · Feb 8, 2025

Created a case last week 7065879590 and the initial tech I think it was a chatBOT was unable to help. They said they were transferring the case to an actual support teach - then closed the case! Really??Bottom line, I have registered 3 passkeys with my account and when I try to setup 2FA, micro$oft doesn't allow me to use any of them. It only allows a pin sent to my phone no way your company is getting that! or via an alternative email account. Best part of that one, when I supply the alt em address, it says that's already in use! How many email addresses does one need to associate with

:)

Brink · Feb 8, 2025

W3C & FIDO Alliance Finalize Web Standard Secure, Passwordless Logins

The World Wide Web Consortium (W3C) and the FIDO Alliance today announced the Web Authentication (WebAuthn) specification is now an official web standard. This advancement is a major step forward in making the web more secure— and usable—for users around the world.

W3C's WebAuthn Recommendation, a core component of the FIDO Alliance's FIDO2 set of specifications, is a browser/platform standard for simpler and stronger authentication. It is already supported in Windows 10, Android, and Google Chrome, Mozilla Firefox, Microsoft Edge and Apple Safari (preview) Web browsers. WebAuthn allows users to log into their internet accounts using their preferred device. Web services and apps can — and should—turn on this functionality to give their users the option to log in more easily via biometrics, mobile devices and/or FIDO security keys, and with much higher security over passwords alone.

“Now is the time for web services and businesses to adopt WebAuthn to move beyond vulnerable passwords and help web users improve the security of their online experiences,” said Jeff Jaffe, W3C CEO. “W3C's Recommendation establishes web-wide interoperability guidance, setting consistent expectations for web users and the sites they visit. W3C is working to implement this best practice on its own site.”

A user-friendly solution to password theft, phishing and replay attacks

It's common knowledge that passwords have outlived their efficacy. Not only are stolen, weak or default passwords behind 81 percent of data breaches, they are a drain of time and resources. According to a recent Yubico study, users spend 10.9 hours per year entering and/or resetting passwords, which costs companies an average of $5.2 million annually. While traditional multi-factor authentication (MFA) solutions like SMS one-time codes add another layer of security, they are still vulnerable to phishing attacks, aren’t simple to use and suffer from low opt-in rates.

With FIDO2 and WebAuthn, the global technology community has come together to provide a shared solution to the shared password problem. FIDO2 addresses all of the issues with traditional authentication:

Security: FIDO2 cryptographic login credentials are unique across every website, biometrics or other secrets like passwords never leave the user’s device and are never stored on a server. This security model eliminates the risks of phishing, all forms of password theft and replay attacks.

Convenience: Users log in with convenient methods such as fingerprint readers, cameras, FIDO security keys, or their personal mobile device.

Privacy: Because FIDO keys are unique for each Internet site, they cannot be used to track you across sites.

Scalability: websites can enable FIDO2 via simple API call across all supported browsers and platforms on billions of devices consumers use every day.

“Web Authentication as an official web standard is the pinnacle of many years of industry collaboration to develop a practical solution for stronger authentication on the web,” said Brett McDowell, executive director of the FIDO Alliance. “With this milestone, we're moving into a new era of ubiquitous, hardware-backed FIDO Authentication protection for everyone using the internet.”

Getting started

For services providers and vendors ready to get started with FIDO2 specifications and browser/platform support, the FIDO Alliance has provided testing tools and launched a certification program. Currently, there are many FIDO2 Certified solutions available to support a wide variety of use cases, including FIDO Certified Universal Servers that support FIDO2 and all prior UAF and U2F devices for full backward compatibility with the full range of certified FIDO authenticators.

Visit the FIDO Alliance website for more information on FIDO2, including resources for developers and product vendors interested in taking part in the FIDO Certified program.
Click to expand...

Source: https://www.w3.org/2019/03/pressrele...hn-rec.html.en

Brink · Feb 8, 2025

W3C & FIDO Alliance Finalize Web Standard Secure, Passwordless Logins

The World Wide Web Consortium (W3C) and the FIDO Alliance today announced the Web Authentication (WebAuthn) specification is now an official web standard. This advancement is a major step forward in making the web more secure— and usable—for users around the world.

W3C's WebAuthn Recommendation, a core component of the FIDO Alliance's FIDO2 set of specifications, is a browser/platform standard for simpler and stronger authentication. It is already supported in Windows 10, Android, and Google Chrome, Mozilla Firefox, Microsoft Edge and Apple Safari (preview) Web browsers. WebAuthn allows users to log into their internet accounts using their preferred device. Web services and apps can — and should—turn on this functionality to give their users the option to log in more easily via biometrics, mobile devices and/or FIDO security keys, and with much higher security over passwords alone.

“Now is the time for web services and businesses to adopt WebAuthn to move beyond vulnerable passwords and help web users improve the security of their online experiences,” said Jeff Jaffe, W3C CEO. “W3C's Recommendation establishes web-wide interoperability guidance, setting consistent expectations for web users and the sites they visit. W3C is working to implement this best practice on its own site.”

A user-friendly solution to password theft, phishing and replay attacks

It's common knowledge that passwords have outlived their efficacy. Not only are stolen, weak or default passwords behind 81 percent of data breaches, they are a drain of time and resources. According to a recent Yubico study, users spend 10.9 hours per year entering and/or resetting passwords, which costs companies an average of $5.2 million annually. While traditional multi-factor authentication (MFA) solutions like SMS one-time codes add another layer of security, they are still vulnerable to phishing attacks, aren’t simple to use and suffer from low opt-in rates.

With FIDO2 and WebAuthn, the global technology community has come together to provide a shared solution to the shared password problem. FIDO2 addresses all of the issues with traditional authentication:

Security: FIDO2 cryptographic login credentials are unique across every website, biometrics or other secrets like passwords never leave the user’s device and are never stored on a server. This security model eliminates the risks of phishing, all forms of password theft and replay attacks.

Convenience: Users log in with convenient methods such as fingerprint readers, cameras, FIDO security keys, or their personal mobile device.

Privacy: Because FIDO keys are unique for each Internet site, they cannot be used to track you across sites.

Scalability: websites can enable FIDO2 via simple API call across all supported browsers and platforms on billions of devices consumers use every day.

“Web Authentication as an official web standard is the pinnacle of many years of industry collaboration to develop a practical solution for stronger authentication on the web,” said Brett McDowell, executive director of the FIDO Alliance. “With this milestone, we're moving into a new era of ubiquitous, hardware-backed FIDO Authentication protection for everyone using the internet.”

Getting started

For services providers and vendors ready to get started with FIDO2 specifications and browser/platform support, the FIDO Alliance has provided testing tools and launched a certification program. Currently, there are many FIDO2 Certified solutions available to support a wide variety of use cases, including FIDO Certified Universal Servers that support FIDO2 and all prior UAF and U2F devices for full backward compatibility with the full range of certified FIDO authenticators.

Visit the FIDO Alliance website for more information on FIDO2, including resources for developers and product vendors interested in taking part in the FIDO Certified program.
Click to expand...

Source: https://www.w3.org/2019/03/pressrele...hn-rec.html.en

Brink · Feb 8, 2025

USB-C Titan Security Keys now available in the US

Quick launch summary

We’re expanding the 2-Step Verification (2SV) options available for Google Accounts by offering a new USB-C Titan Security Key in the United States.

Titan Security Keys are phishing-resistant two-factor authentication (2FA) devices that support FIDO standards. FIDO security keys are the strongest form of 2SV available, and using them can significantly reduce the risk of account hijacking. Providing a USB-C option alongside the other available 2SV methods will help make it easier for more users to protect their accounts.

These new Titan Security Keys can also be used in Google’s Advanced Protection Program for enterprise, which is designed to protect users most at risk of targeted attacks. These can include IT administrators, business executives, and employees in security-sensitive industries such as finance and healthcare.

USB-C Titan Security Keys are compatible with Android, Chrome OS, macOS, and Windows devices. For more information, see our post about USB-C Titan Security Keys on the Google Security Blog.

USB-C Titan Security Key is now available

Availability

Rollout details

USB-C Titan Security Keys are now available on the Google Store in the United States. See more information about Security Key pricing and availability.

Bulk orders are also available for enterprise customers in select countries.

G Suite editions

Available to all G Suite and Cloud Identity editions.
Click to expand...

Source: https://gsuiteupdates.googleblog.com...available.html

Windows 10: using a FIDO/oauth2 security key as the second form of authorization

using a FIDO/oauth2 security key as the second form of authorization

using a FIDO/oauth2 security key as the second form of authorization

using a FIDO/oauth2 security key as the second form of authorization

using a FIDO/oauth2 security key as the second form of authorization - Similar Threads - using FIDO oauth2

using a FIDO/oauth2 security key as the second form of authorization

what else security enhancement can do after used FIDO key to login or use smart card...

what is the procedure to use and force to use FIDO key to login windows?

what else security enhancement can do after used FIDO key to login or use smart card...

what is the procedure to use and force to use FIDO key to login windows?

local security authority

Windows Sign in Options Fido Security key by default. intune managed device

Windows Sign in Options Fido Security key by default. intune managed device

Windows Sign in Options Fido Security key by default. intune managed device