Android now allowing access to apps and websites without password! FIDO2 Certified!

Introduction

In MWC 2019 different companies joined the program telling world about there new moves to add features in applications or launching their new gadgets. One of the announcement was made by FIDO Alliance that was eye catching. It Declared that the most popular operating system that was produced by Google a couple of years ago is now officially FIDO2 certified. What does it mean?

What do FIDO aim at?

Living in a world free of passwords is a dream to many tech enthusiasts. Also for common people, passwords are easily forgetable and a kind of mess to manage different passwords for different accounts. In such condition someone must work on making technology or system enough smart to make everything just...password-less.
FIDO Alliance is an association that works on managing and directing password standards. If you think it is a infamous alliance, you might be surprised to know some of the partners of FIDO are GitHub, Google, eBay itself.

What is the authentication process and will FIDO provide better option than this?

It will provide much better security protocols for authentication than before. Let's understand this-
As a person is on Facebook. His ID along with it's password is his too.
He must be having it in his mind or may be have written down in a page of paper laying on his dinner table. He thinks his password is known to only him without anyone knowing it. But wait kid, every signed up details are kept by the user and the server of that service. It is necessary for authentication. During the authentication process, the user sends the details to the server where it is checked whether it matches the stored details. If everything is genuine, user gets access to his content. But if everything is fine why new policies?

As everything fits fine why new rules and system?

The major problem is all the system is:  user's password and ID is stored at two place- at user and service servers.....allowing its vulnerability to 2 places. You'll say WhatsApp is ahead in this game by providing  end-to-end encryption, but hackers are developing and are coming up daily with new methods to suck out your precious information and data. At this point, FIDO2 will work differently by storing user's password in his mobile in offline condition. Still we don't know how it will work but the alliance promised it to be more secure and the next step for authentication for various operating systems plus now including Android.

So is it available to all Android versions?
Soooo....no. It is available for Android versions 7.0 (Nougat) and later. The developers of web and application can use the application programming interface (API) to implement this feature in their services.
We can expect this feature to come to more platforms a time later, but till now it's time to know whether it is success or a grand failure.

**For more related posts stay tuned**