“Everyone feels the need to write a custom authentication protocol” says George Reese, which he claims is one of the things he learnt working on a programming API for cloud providers and Saas ...

With the Firefox 60 release on May 9, Firefox became the first major browser to support the Web Authentication API. This API enables users to avoid text-based passwords for websites and instead ...

A look at the recently released YubiKey 5 hardware authenticator series and how web authentication with the new WebAuthn API leverages devices like the YubiKey for painless website registration and ...

Both authentication and authorization are crucial for API security. Without proper authentication, you can't be sure who is trying to access your APIs. Without proper authorization, you can't control ...

Apple in a WWDC presentation on Wednesday detailed a new Safari feature that allows developers to integrate Face ID and Touch ID authentication for the web, replacing common text-based logins.

Microsoft’s cloud services have come under scrutiny in recent months, with APIs at the heart of the matter. Here are some strategies to help mitigate security issues that can arise when using APIs.

Today, the World Wide Web Consortium (W3C), the organization behind all web standards, has formally promoted the Web Authentication API to the title of official web standard. This promotion means ...

One such company, Stytch, just raised $30 million in a Series A round of funding as it launches out of beta with its API-first passwordless authentication platform.