NIST supplements Digital Identity Guidelines with interim advice on using syncable authenticators like passkeys.

NIST issued a supplement to its Digital Identity Guidelines, offering interim advice for agencies on using syncable authenticators like passkeys across different devices. The supplement, titled "Incorporating syncable authenticators," provides guidance on using these authenticators at Authentication Assurance Level 2 (AAL2), and covers requirements and considerations to mitigate risks associated with key cloning. The FIDO Alliance estimates 8 billion user accounts support authentication with passkeys, and their use is increasing.

April 23, 2024
3 Articles