Following recent news that Google Chrome and Mozilla Firefox will ship with password-less WebAuthn enabled as their default identity authentication, Duo Security R&D Engineer Nick Steele, one of the leading researchers in the WebAuthn space, commented below.
Nick Steele, R&D Engineer at Duo Security:
“WebAuthn is the emerging standard pushing us towards a password-free world. One of the core components to the WebAuthn spec is the support of biometric authenticators, like smart phones with fingerprint readers, for registering and logging into sites on the web. As biometrics become more widely used and normalized by the general public, WebAuthn will allow vendors to provide a safer and more secure method for login than passwords. This could help lead to a reduction in password-associated phishing, the effectiveness of password database breaches, and make users safer online.”