FIDO Alliance

wikipedia:FIDO Alliance

• Generate FIDO key (ecdsa-sk and ed25519-sk)

ssh-keygen -t ecdsa-sk -f ~/.ssh/id_ecdsa_sk
Generating public/private ecdsa-sk key pair.

ssh-add -K to load resident keys from a FIDO authenticator.

no-touch-required

Related terms

• OpenSSH changelog: OpenSSH 8.2 (February 2020): FIDO/U2F Support for MFA
• PAM
• FIDO security keys
• Configure MFA on AWS
• Authentication hardware
• Passwordless authentication

See also

• U2F, FIDO Alliance
• MFA: FreeOTP, Google Authenticator, Okta Verify, Duo Security, Microsoft Authenticator, Strong customer authentication, Dualshield, HOTP, TOTP, OATH, Authy, Push authentication, google-authenticator, Duo Mobile, DenyAllExceptListedIfNoMFA, Configure MFA on AWS, LastPass Authenticator mobile app
• Authentication, AAA, MFA, OpenID, OAuth, OATH, PAM, Personal access token, CWE: Broken Access Control, PAT, Mutual authentication, Federated authentication, IdP, Amazon Cognito, Phone to sign in, Firebase Authentication, Auth0, WebAuthn, Web3auth, Challenge-response, Passwordless authentication, HMAC, HOTP, TOTP, OATH