The challenges of account recovery
summary
FIDO succeeds at strong device-bound authentication but fails at lost-device recovery, creating a practical attack surface: passkey mass compromise if recovery lets an attacker transfer all keys. Recovery flows that rely on SMS, KBA or passwords remain fragile. Effective solutions combine on-device biometrics stored as biometric templates with fragmented storage, liveness/anti-spoof checks, multiple secure recovery factors, and a lightweight web-based recovery flow plus continuous fraud monitoring and global standards compliance.
AI-written summary · about
chapters (5)
- 0:00Introduction to account recovery
- 1:02FIDO adoption today
- 3:56Account recovery challenges
- 7:50Solution requirements for recovery
- 13:20Threat monitoring importance
related talks
24mAchieving strategic outcomes with FIDO: The phishing-resistant user
31mAuthentication Afterlife: the dark side of making lost password recovery harder
22mComplementing Passkeys with Strong Identity Assurance for High-Risk Actions and Account Recovery
25mDo Passkeys Solve the Account Recovery Problem?
26mDesigning consumer account recovery in a 2FA world
56mPasskeys 101: Technical Principles of FIDO
23mPasswordless Authentication in the Regulatory MFA Landscape
47mLet’s stop blaming our users for getting hacked when it is our problem to solve