FIDO2: articles and guides

A hardware token is a physical login factor. How OTP fobs, RSA SecurID, Duo D-100 and YubiKey keys differ, which resist phishing, and how to choose.

FIDO2 and passkeys give the workforce phishing-resistant sign-in that is also faster and easier than passwords. The security, productivity and cost benefits, and how to realise them.

NIS2 doesn't name FIDO2, but Article 21 requires MFA where appropriate, and FIDO2 passkeys and security keys meet its phishing-resistant end. Rollout order.

DORA does not mandate FIDO2, but requires strong authentication and robust IAM. FIDO2 hardware keys support that for privileged access to financial systems.

Passkeys and FIDO2 hardware security keys are both WebAuthn credentials, but they differ in portability, assurance and where they belong. A clear comparison and when to use each.