US Government agencies are required by Executive Order EO 14208 and Memorandum M-22-09 to use phishing-resistant authentication for their employees and to offer phishing-resistant authentication to citizens. The Cybersecurity & Infrastructure Security Agency (CISA) “strongly urges system administrators and other high-value targets to implement or plan their migration to phishing-resistant MFA'' and identifies FIDO/WebAuthn as the “only widely available phishing-resistant authentication” solution.
The Nok Nok S3 Authentication Suite (S3 Suite) provides phishing-resistant authentication that can easily be used on mobile devices and PCs without installation of additional middleware or hardware. This approach works well for workforce authentication and scales for authentication of citizens.
