Industry body
The industry association behind the FIDO2 standards and passkeys. It certifies products and runs the Authenticate conference.
The startup says its SIM-based login now works across AT&T, T-Mobile and Verizon. Here is what the company claims, what independent reporting confirms, and the questions a bank should ask before a pilot.
Revision 4 keeps SMS codes on the permitted list, with strings attached, and adds synced passkeys as a phishing-resistant alternative. The strings read like a migration plan.
Passkeys that sync across a user’s devices trade some control for usability. Here is what stays phishing-resistant, and what moves to the sync account.