Achieving strategic outcomes with FIDO: The phishing-resistant user
summary
Companies replace passwords with FIDO passkeys and hardware keys, cut credential sprawl by federating identity providers, and see zero account takeovers for 11 months after rollout; attackers shift to help‑desk man‑in‑the‑middle recovery fraud. Successful programs pair device‑bound and synced passkeys, documented in‑person and remote recovery flows, and executive buy‑in — one customer enforces a board mandate: maintain ≥80% passkey coverage. Plan for legacy “long‑tail” apps, treat recovery as the new weak link, and require HR and legal process changes.
AI-written summary · about
chapters (7)
- 0:00Introduction and welcome
- 0:28Why phishing resistance matters
- 2:36Investing in risk removal strategies
- 7:33Defining a phishing-resistant user
- 13:58Protecting every user in the enterprise
- 19:17Executive alignment and process change
- 22:48Overcoming legacy barriers
related talks
19mTaking FIDO to the masses
14mThe challenges of account recovery
02h 22mFIDO 101
01h 00mFeatured Keynote
14mSecuring Authentication with and within FIDO
43mPasswordless: a story of risk, protection and excellent UX
05m“You still use the password after all” – Exploring FIDO2 Security Keys in a Small
26mHey FIDO Meet Passkey