Identity authentication provider authID introduced the newest version of its Verified platform that uses human-factor authentication (HFA), aiming to address the weaknesses of legacy multi-factor authentication (MFA) for better zero-trust security.

HFA integrates FIDO2 passwordless authentication certified by the FIDO Alliance with cloud biometrics to authorize the human behind the device. This offers “a streamlined path to zero-trust architecture,” the vendor claims.

Tom Thimot, authID CEO, explained in a statement that HFA addresses "cyberrisks that exploit human error."

“Because the world is still largely dependent on passwords and compromise-prone legacy MFA, cyberattacks that exploit human behavior and wreak havoc for organizations are all too common in 2022,” Thimot added.

Attacks targeting MFA are on the rise. A recent report from identity and access management company Okta showed that its Auth0 platform saw more than 100 million MFA attacks in the first 90 days of this year. Okta recommends redesigning security policies to replace weak authenticators with phishing resistance authenticators for MFA such as FIDO Alliance protocols.

authID claims its Verified platform is built on strong FIDO2 passwordless device authentication and the latest 3.0 version adds enhanced user experience features, including seamless passwordless authentication that allows users to log in without a password across any mobile or desktop device.

The service also supports OpenID Connect (OIDC) authentication protocol that delivers HFA connections with the identity ecosystem, including identity access management (IAM), privileged access management (PAM), and endpoint detection and response (EDR) providers, as well as cloud applications. This feature will make the move to zero-trust architecture easier, the vendor touted.