FIDO CTAP 2.1
summary
FIDO CTAP 2.1 adds concrete enterprise features: passkey multi-device lets one authenticator bootstrap access across phones, laptops and desktops so lost keys don’t force re-registration; enforce PIN change and minimum PIN length let admins provision keys and force stronger PINs for compliance; device-side always require user verification supports FIPS levels 2–3; a largeBlob stores certificates for offline edge authentication; and enterprise attestation ties authenticators to purchased inventory. New authenticators and RP updates unlock these while remaining backward compatible.
AI-written summary · about
chapters (7)
- 0:00Introduction to FIDO CTAP 2.1
- 1:05FIDO adoption across organizations
- 2:28Passkey benefits for enterprises
- 6:19Security and compliance enhancements
- 9:53Large blob and new use cases
- 12:19Enterprise attestation features
- 14:09Q&A session
related talks
25mCTAP 2.1: FIDO's new tricks for passkeys on security keys
56mPasskeys 101: Technical Principles of FIDO
45mPanel: America Loves FIDO
20mThe [pass] keys to success of FIDO2 Enterprise Adoption
23mSimplify enterprise adoption of passkeys: Best practices for implementation
38mBreaking FIDO: Are Exploits in There?
27mBringing FIDO passwordless innovation into regulated financial industry
16mClosing gaps in strong auth: FIDO2 device support