OtherInternational (FIDO Alliance/W3C)
FIDO2 / WebAuthn — Passwordless Authentication Standard
What is FIDO2 / WebAuthn — Passwordless Authentication Standard?
FIDO2 is the passwordless authentication standard developed by the FIDO Alliance and W3C. FIDO2 consists of two components: WebAuthn (W3C Web Authentication API) and CTAP2 (Client-to-Authenticator Protocol). It comprises 11 controls organised across 4 domains, and applies in International (FIDO Alliance/W3C).
Map this against the frameworks you already hold
The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.
Browse the framework graph →The 4 domains FIDO2 / WebAuthn — Passwordless Authentication Standard groups its controls into
Passkey and Platform Integration
Security Requirements
CTAP2 (Client to Authenticator Protocol)
WebAuthn API (W3C)
Frameworks that share controls with FIDO2 / WebAuthn — Passwordless Authentication Standard
Each of these has at least one control mapped to a control in FIDO2 / WebAuthn — Passwordless Authentication Standard. The number is how many FIDO2 / WebAuthn — Passwordless Authentication Standard controls are shared, counted from the mapping graph.
AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)
2 shared controlsVermont Artificial Intelligence and Consumer Data Act (AICDA)
2 shared controlsUSMCA Chapter 19 - Digital Trade (United States-Mexico-Canada Agreement)
2 shared controlsUS EPA Safe Drinking Water Act (SDWA) - Cybersecurity Requirements
2 shared controlsTEFCA - Trusted Exchange Framework and Common Agreement
2 shared controlsSWIFT CSCF
2 shared controlsRegulation on the European Health Data Space (EHDS)
2 shared controlsRussia Federal Law on Personal Data (152-FZ)
2 shared controlsWhere FIDO2 / WebAuthn — Passwordless Authentication Standard overlaps with the standards you already hold
FIDO2 / WebAuthn — Passwordless Authentication Standard vs AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)View comparison →FIDO2 / WebAuthn — Passwordless Authentication Standard vs Vermont Artificial Intelligence and Consumer Data Act (AICDA)View comparison →FIDO2 / WebAuthn — Passwordless Authentication Standard vs USMCA Chapter 19 - Digital Trade (United States-Mexico-Canada Agreement)View comparison →FIDO2 / WebAuthn — Passwordless Authentication Standard vs US EPA Safe Drinking Water Act (SDWA) - Cybersecurity RequirementsView comparison →FIDO2 / WebAuthn — Passwordless Authentication Standard vs TEFCA - Trusted Exchange Framework and Common AgreementView comparison →FIDO2 / WebAuthn — Passwordless Authentication Standard vs SWIFT CSCFView comparison →
What FIDO2 / WebAuthn — Passwordless Authentication Standard means in your sector
FIDO2 / WebAuthn — Passwordless Authentication Standard for Healthcare→FIDO2 / WebAuthn — Passwordless Authentication Standard for Financial Services→FIDO2 / WebAuthn — Passwordless Authentication Standard for Technology→FIDO2 / WebAuthn — Passwordless Authentication Standard for Government→FIDO2 / WebAuthn — Passwordless Authentication Standard for Manufacturing→FIDO2 / WebAuthn — Passwordless Authentication Standard for Energy→FIDO2 / WebAuthn — Passwordless Authentication Standard for Retail→FIDO2 / WebAuthn — Passwordless Authentication Standard for Education→
What FIDO2 / WebAuthn — Passwordless Authentication Standard means for your job
FIDO2 / WebAuthn — Passwordless Authentication Standard for CISOs→FIDO2 / WebAuthn — Passwordless Authentication Standard for Compliance Officers→FIDO2 / WebAuthn — Passwordless Authentication Standard for Risk Managers→FIDO2 / WebAuthn — Passwordless Authentication Standard for IT Directors→FIDO2 / WebAuthn — Passwordless Authentication Standard for DPOs→FIDO2 / WebAuthn — Passwordless Authentication Standard for Auditors→
Questions people ask about FIDO2 / WebAuthn — Passwordless Authentication Standard
What is FIDO2 / WebAuthn?
FIDO2 is the passwordless authentication standard developed by the FIDO Alliance and W3C. FIDO2 consists of two components: WebAuthn (W3C Web Authentication API) and CTAP2 (Client-to-Authenticator Protocol).
How many controls does FIDO2 / WebAuthn have?
FIDO2 / WebAuthn contains 11 controls organized across 4 domains.
Where does FIDO2 / WebAuthn apply?
FIDO2 / WebAuthn is applicable in International (FIDO Alliance/W3C). Organizations operating in or serving customers in this jurisdiction should evaluate its requirements.
What frameworks does FIDO2 / WebAuthn map to?
FIDO2 / WebAuthn has control-to-control mappings with 500 other compliance frameworks in our database. Use our compliance platform to explore these mappings interactively.
How do I get started with FIDO2 / WebAuthn compliance?
Start by understanding the framework's key controls and domains. Our compliance platform provides AI-powered gap analysis and mapping tools to help you assess your current posture and build a remediation plan.
Query FIDO2 / WebAuthn — Passwordless Authentication Standard programmatically
FIDO2 / WebAuthn — Passwordless Authentication Standard, its 11 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
FIDO2 / WebAuthn — Passwordless Authentication Standard API reference and MCP config →How ready are you for FIDO2 / WebAuthn — Passwordless Authentication Standard?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.
Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .