{"id":60467,"date":"2023-11-13T02:15:06","date_gmt":"2023-11-13T07:15:06","guid":{"rendered":"https:\/\/fidodev.wpengine.com\/?page_id=60467"},"modified":"2026-02-17T15:19:13","modified_gmt":"2026-02-17T20:19:13","slug":"specifications-overview","status":"publish","type":"page","link":"https:\/\/fidoalliance.org\/specifications-overview\/","title":{"rendered":"Specifications"},"content":{"rendered":"\n
\n
\n
\n
\n

Specification development is a core element of FIDO Alliance\u2019s mission to reduce the world\u2019s reliance on passwords.  Through its technical working groups, the FIDO Alliance<\/a> publishes specifications in two areas: user authentication and secure device onboarding.  FIDO Alliance also submits mature technical specification(s) to recognized standards development organization(s) for formal standardization.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

User Authentication Specifications<\/strong><\/h2>\n\n\n\n

The FIDO Alliance has published three sets of specifications for simpler, stronger user authentication: FIDO Universal Second Factor (FIDO U2F<\/a>), FIDO Universal Authentication Framework (FIDO UAF) and the Client to Authenticator Protocols (CTAP). CTAP<\/a> is complementary to the W3C\u2019s Web Authentication (WebAuthn) specification<\/a>; together, they are known as FIDO2.
<\/p>\n\n\n\n

FIDO standards use standard public key cryptography techniques to provide phishing-resistant authentication with cryptographic key pairs called passkeys<\/a>. FIDO authentication is designed from the ground up to protect user privacy and prevent phishing. Every passkey is unique and bound to the online service domain. The protocols do not provide information that can be used by different online services to collaborate and track a user across the services. Biometric information, if used, never leaves the user\u2019s device.

Read the technical specifications on the FIDO authentication specifications download<\/a> page.<\/p>\n\n\n\n

\n
Download User Authentication Specs<\/a><\/div>\n<\/div>\n\n\n\n
\n
FIDO User Authentication Specifications<\/a><\/div>\n<\/div>\n\n\n\n

Device Onboarding Specification<\/strong>s<\/h2>\n\n\n\n

The FIDO Alliance\u2019s FIDO Device Onboard specification is an automatic onboarding protocol for edge nodes and IoT devices.  The FDO<\/a> protocol is a freely available standard that champions a \u2018zero trust\u2019 approach to enable devices to quickly and securely onboard to cloud and edge management platforms. <\/p>\n\n\n\n

Device onboarding is the process of installing secrets and configuration data into a device so that the device is able to connect and interact securely to cloud and edge management platforms. The platform is used by the device owner to manage the device by: patching security vulnerabilities; installing or updating software; retrieving sensor data; interacting with actuators; etc. FDO is an automatic onboarding mechanism, meaning that it is invoked autonomously and performs only limited, specific interactions with its environment to complete. FDO permits late binding of device credentials so that one manufactured device may be onboarded, without modification, to many different platforms.<\/p>\n\n\n\n

\n
Download FDO Specs<\/a><\/div>\n<\/div>\n\n\n\n
\n
Device Onboarding <\/a><\/div>\n<\/div>\n\n\n\n

Credential Exchange Specifications<\/h2>\n\n\n\n

FIDO Alliance\u2019s credential exchange specifications define a standard format for transferring all types of credentials in a credential manager including passwords, passkeys and more in a manner that is secure by default.<\/p>\n\n\n\n

Credential Exchange Format<\/strong> (Working Draft)<\/p>\n\n\n\n

This document defines the data structures and format of credentials being securely passed or referenced between two applications during credential exchange. It is used in conjunction with the Credential Exchange Protocol.<\/p>\n\n\n\n

HTML<\/a><\/p>\n\n\n\n

Credential Exchange Protocol<\/strong> (Working Draft)<\/p>\n\n\n\n

This document defines a protocol to securely move one or more credentials between two credentials providing applications on the same or separate devices. It is used in conjunction with the Credential Exchange Format.<\/p>\n\n\n\n

HTML<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Specification development is a core element of FIDO Alliance\u2019s mission to reduce the world\u2019s reliance on passwords.  Through its technical working groups, the FIDO Alliance publishes specifications in two areas: […]<\/p>\n","protected":false},"author":59250,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"_EventAllDay":false,"_EventTimezone":"","_EventStartDate":"","_EventEndDate":"","_EventStartDateUTC":"","_EventEndDateUTC":"","_EventShowMap":false,"_EventShowMapLink":false,"_EventURL":"","_EventCost":"","_EventCostDescription":"","_EventCurrencySymbol":"","_EventCurrencyCode":"","_EventCurrencyPosition":"","_EventDateTimeSeparator":"","_EventTimeRangeSeparator":"","_EventOrganizerID":[],"_EventVenueID":[],"_OrganizerEmail":"","_OrganizerPhone":"","_OrganizerWebsite":"","_VenueAddress":"","_VenueCity":"","_VenueCountry":"","_VenueProvince":"","_VenueState":"","_VenueZip":"","_VenuePhone":"","_VenueURL":"","_VenueStateProvince":"","_VenueLat":"","_VenueLng":"","_VenueShowMap":false,"_VenueShowMapLink":false,"footnotes":""},"content-type":[],"class_list":["post-60467","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/fidoalliance.org\/wp-json\/wp\/v2\/pages\/60467","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fidoalliance.org\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/fidoalliance.org\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/fidoalliance.org\/wp-json\/wp\/v2\/users\/59250"}],"replies":[{"embeddable":true,"href":"https:\/\/fidoalliance.org\/wp-json\/wp\/v2\/comments?post=60467"}],"version-history":[{"count":0,"href":"https:\/\/fidoalliance.org\/wp-json\/wp\/v2\/pages\/60467\/revisions"}],"wp:attachment":[{"href":"https:\/\/fidoalliance.org\/wp-json\/wp\/v2\/media?parent=60467"}],"wp:term":[{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/fidoalliance.org\/wp-json\/wp\/v2\/content-type?post=60467"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}