Glossary
Most popular terms
Are there any terms missing?
A
AAGUID (Authenticator Attestation Global Unique Identifier)
Access Token
Account Takeover (ATO)
Adaptive MFA
allowCredentials
Assertion
Attestation
Authentication Assurance Level (AAL)
Authenticator
Authenticator App
authenticatorSelection
B
Biometric Authentication
Brute Force Attack
C
CBOR
CDA (Cross-Device Authentication)
Certificate-Based Authentication (CBA)
Chrome on Mac
CISO
clientDataJSON
Conditional UI
Confidential and Public Applications
Credential Stuffing
Critical Infrastructure
Cross-Platform Authenticator
Cryptographic Challenge
CTAP (Client-to-Authenticator-Protocol)
Cyber Attack
D
Data Breach
Discoverable Credential
DNS Spoofing
E
eIDAS
excludeCredentials
Exploit
External Authenticator
F
FIDO Alliance
FIDO2
FIPS 140-2
G
GDPR (General Data Protection Regulation)
Google Password Manager
H
HMAC-Secret
HSM (Hardware Security Module)
I
IAM (Identity Access Management)
iCloud Keychain
IP Spoofing
J
JWKS (JSON Web Key Sets)
JWT (JSON Web Token)
M
Machine-to-machine (M2M) Authentication
Malware
Man-in-the-Middle (MitM) Attack
MFA (Multi-Factor Authentication)
N
Non-Resident Keys (NRK)
O
OAuth 2.0
OIDC (OpenID Connect)
OTP (One-Time Password)
P
PAM (Privileged Access Management)
Passkey
Password Hashing
Password Salting
Passwordless Authentication
Phishing
Phishing-Resistant MFA
Platform Authenticator
Public Key Cryptography
PublicKeyCredentialCreationOptions
PublicKeyCredentialRequestOptions
R
Ransomware
Relying Party
Resident Key
Role-Based Access Control (RBAC)
Root of Trust (RoT)
S
SAML (Security Assertion Markup Language)
Secure Enclave
Security Key
SIM Swap
Smart Card
Social Login
Spear Phishing
SSO (Single-Sign-On)
Step-Up Authentication
T
TPM (Trusted Platform Model)
U
U2F (Universal 2nd Factor)
User Presence
User Verification
V
Vishing
W
W3C (World Wide Web Consortium)
WebAuthn
Windows Hello
Y
YubiKey
Z
Zero Trust
Are there any terms missing?
No credit card required
Free community plan
For new & existing apps