Mobile FIDO SDK
Fast Identity Online (FIDO) is an authentication standard that provides secure and fast passwordless login experiences across both websites and apps.
Mobile FIDO SDK is a mobile client solution that brings the WebAuthn specifications to the mobile platform, which supports the creation and usage of strong credentials for authenticating users.
This SDK is aligned to the WebAuthn specifications. To provide users with multiple options of authenticating themselves while also secure managing created credentials, Mobile FIDO SDK supports both syncable and device-bound passkeys.
Supported passkeys
-
Syncable passkeys
-
These platform-supported passkeys are managed by the Google and Apple platforms.
-
These keys provide cross-device functionality and can be accessed across multiple devices, such as a browser or mobile device.
-
These keys are stored in a centralized location such as in Google Password Manager or on iCloud.
-
-
Device-bound passkeys
-
These passkeys are managed by the SDK.
-
These keys are stored locally on the device and are not synced across devices.
-
These keys offer enhanced security because they are stored and used only by the single device.
-
These passkeys are bound using both software and hardware keys (for example, Android Keystore or iOS Secure Enclave).
-
Mobile FIDO SDK supports two device-bound authenticators:
-
Biometric authenticators
-
PIN authenticators: Users create a PIN that is then used for user verification.
-
-
Additional features
Mobile FIDO SDK also includes Runtime Application Self-Protection (RASP). Refer to the detection mechanisms for more information.
Delivery package
The Mobile FIDO SDK delivery package consists of several components:
-
Mobile FIDO SDK: A binary version that is compliant with the FIDO2 specifications.
-
Mobile FIDO UI SDK: An optional UI module delivered as source code.
Release notes
For the list of changes, new features, and known issues in each release, see the Mobile FIDO SDK release notes.
