FIDO2 Project


The FIDO2 Project is a joint effort between the FIDO Alliance and the World Wide Web Consortium whose goal is to create strong authentication for the web. At its core, FIDO2 consists of the W3C Web Authentication standard and the FIDO Client to Authenticator Protocol. FIDO2 is based upon previous work done by the FIDO Alliance, in particular the Universal 2nd Factor authentication standard.
Taken together, WebAuthn and CTAP specify a standard authentication protocol where the protocol endpoints consist of a user-controlled cryptographic authenticator and a WebAuthn Relying Party. A web user agent together with a WebAuthn client form an intermediary between the authenticator and the relying party. A single WebAuthn client Device may support multiple WebAuthn clients. For example, a laptop may support multiple clients, one for each conforming user agent running on the laptop. A conforming user agent implements the WebAuthn JavaScript API.
As its name implies, the Client to Authenticator Protocol enables a conforming cryptographic authenticator to interoperate with a WebAuthn client. The CTAP specification refers to two protocol versions called CTAP1/U2F and CTAP2. An authenticator that implements one of these protocols is typically referred to as an U2F authenticator or a FIDO2 authenticator, respectively. A FIDO2 authenticator that also implements the CTAP1/U2F protocol is backward compatible with U2F.