U2F allows every service provider to be their own identity provider, or optionally let users authenticate through a federated service provider. Open standard backed by leading Internet and financial services, including Google, Bank of America and 170 companies in the FIDO Alliance. With this approach no secrets are shared among service providers, and even low-cost U2F devices can support any number of services.ĭesigned for existing phones and computers, for many authentication modalities (keychain devices, mobile phone, fingerprint reader, etc.) and with different communication methods (USB, NFC, Bluetooth).

A U2F device generates a new pair of keys for every service, the public key is only stored on the specific service it connects to. Each user can also choose to have multiple identities, including anonymous (no personal information associated with the identity). No codes to re-type and no drivers to install.Īllows users to choose, own and control their secure online identity. Works out-of-the-box, enabling instant authentication to any number of services.

Protects against phishing, session hijacking, man in the middle, and malware attacks. Second, the browser sends the code directly to the website, so an attacker sitting in between can’t capture the temporary two-factor code and enter it on the real website to gain access to your account.Strong 2nd factor authentication, using public key crypto and with native support in the browser (starting with Chrome). First, the browser checks to ensure it’s communicating with the real website using encryption, so users won’t be tricked into entering their two-factor codes into fake phishing websites. When you insert it into your computer’s USB port or tap it against your phone, the browser on your computer can communicate with the USB security key using secure encryption technology and provide the correct response that lets you log into a website.īecause this runs as part of the browser itself, this gives you some nice security improvements over typical two-factor authentication. It’s based on existing “smart card” security technology. Some of them have NFC support so they can be used with Android phones. Currently, U2F devices are usually small USB devices that you insert in your computer’s USB port.

U2f aws