W3C approves WebAuthn as the web standard for password-free logins

Re:W3C approves WebAuthn as the web standard for password-fr... by ehsankia on Monday March 04, 2019 @06:30PM (#19306731)

That's fair. Although, for my password manager, you need both password and 2FA to access it, whereas a FIDO key would just require stealing the physical key.

Does there exist FIDO key (other than phones) that require a password to "enable"? For example, when it's plugged into a new device, the key locks until you input some master password?

[ Parent | on HN ]

Re:W3C approves WebAuthn as the web standard for password-fr... by rkeene2 on Monday March 04, 2019 @08:28PM (#19307377)

Most smartcards require you to authenticate to them before they will perform operations using their private cryptographic keys. I'm adding WebAuthn support to my smartcard middleware [0].

[0] https://cackey.rkeene.org/

[ Parent | on HN ]

Re:W3C approves WebAuthn as the web standard for password-fr... by jontro on Monday March 04, 2019 @07:18PM (#19307020)

The Ledger Nano S requires you to enter a pin code at least

[ Parent | on HN ]