Cybersecurity definition
What is FIDO2 / WebAuthn?
By Cyber Tool Stack Editorial TeamUpdated
Definition
The open standards underlying passkeys and hardware security keys: WebAuthn is the browser API a website uses to request a cryptographic credential, and FIDO2 is the broader standard, including the protocol between the browser and an authenticator, that makes the credential resistant to phishing.
Where FIDO2 / WebAuthn fits in the security landscape
These beginner lessons use this term while explaining the surrounding security control.
Related cybersecurity terms
PasskeyA phishing-resistant, passwordless credential stored on a device that uses cryptography to prove identity to a specific website or app, without ever transmitting a shared secret that could be stolen.MFAMulti-Factor AuthenticationA login flow that requires a second proof of identity beyond a password, such as a push approval, one-time code, or biometric check, so a stolen password alone isn't enough to log in.