Skip navigation

Biometric Multi-Factor Authentication Through WebAuthn With TouchID

WebAuthn (Web Authentication API) is an open standard that allows third parties like Duo to tap into built-in biometric authenticators on laptops and smartphones. That means users can use the built-in TouchID fingerprint reader on MacOS laptops for multi-factor authentication (MFA) to securely log into their accounts protected by Duo.

All you need is a supported web browser, operating system and a strong, built-in biometric authenticator like TouchID to enable a secure, phishproof authentication method. For legacy endpoints that don’t contain a built-in biometric sensor, USB-based security keys can bridge the gap.

Created by the FIDO (Fast IDentity Online) Alliance and W3C, the Web Authentication API is a specification that enables strong, public key cryptography registration and authentication.

With WebAuthn, organizations can offer their users the most convenient authentication method available (their own fingerprint). It also guarantees user presence at the point of authentication and helps organizations future proof their investments in modern secure endpoints.

Learn more about WebAuthn on the Duo Blog and WebAuthn.Guide.

WebAuthn is one of many two-factor authentication methods Duo provides to support your diverse user base.

Available for Duo Free, Duo MFA, Duo Access and Duo Beyond editions.