WebAuthn

WebAuthn is a web standard for secure authentication. It is a passwordless authentication method that enables users to securely log into web services using a compatible security key, biometric authentication, or a trusted device.

WebAuthn is based on public-key cryptography, which provides a secure way to authenticate users without relying on passwords. It enables users to create a cryptographic identity that is stored on a security key or in a trusted device, and can be used to securely log into websites and web services.

The key benefits of WebAuthn include improved security, user convenience, and reduced risk of data breaches. By eliminating the need for passwords, WebAuthn eliminates the risk of password-related security incidents, such as password reuse and password-based attacks. Additionally, WebAuthn enables a more convenient and secure login experience for users, making it easier for organizations to adopt strong authentication practices.

Here are some situations where WebAuthn might be used:

1. Online Banking and Financial Services: WebAuthn can provide secure, passwordless authentication for online banking and financial services, reducing the risk of account takeover and fraud.

2. Enterprise Single Sign-On (SSO): WebAuthn can be used to implement SSO solutions for enterprises, providing secure, easy-to-use authentication for employees and contractors.

3. Government Services: WebAuthn can be used to provide secure authentication for government services, reducing the risk of fraud and identity theft.

4. E-Commerce and Online Marketplaces: WebAuthn can be used to secure transactions on e-commerce and online marketplace platforms, reducing the risk of fraud and identity theft.

5. Healthcare Services: WebAuthn can be used to secure patient data and records in healthcare systems, reducing the risk of data breaches and unauthorized access.

Pomerium uses WebAuthn to add authentication and authorization to your security framework.