Skip to content
CyberHardware

U1 · Topic

Authentication hardware

Hardware authenticators bind a login to the real website origin and keep the private key out of reach of malware. This area covers FIDO2/WebAuthn keys, device-bound versus synced passkeys, PIV smart cards and how to roll them out without locking people out.

  • FIDO2
  • Passkeys
  • PIV

Guides in this topic

  1. FIDO2 security keys and passkeys: how to choose

    How FIDO2, WebAuthn and CTAP stop phishing, the difference between device-bound and synced passkeys, and the criteria that matter when buying hardware keys.