FIDO2

FIDO2 is an open standard for passwordless authentication using public key cryptography, combining the WebAuthn browser API with the CTAP protocol for authenticators. The private key never leaves the user's device, and credentials are bound to the site, which makes phishing nearly impossible. It underpins passkeys and hardware security keys.

• YubiKey 5C NFC → Hardware security key supporting FIDO2, U2F, TOTP, and passkeys. Phishing-resistant in a way app codes are not, but buy two; losing your only key locks you out.

Affiliate links: the site may earn a commission at no extra cost to you (how this works). As an Amazon Associate, this site earns from qualifying purchases. No single tool is a silver bullet; treat each as one layer of coverage.