Recognizing their importance, the FIDO Alliance is working to give users more control and making online security less of a headache. To start, they want to make sure you can easily switch between different services without having to worry about your passwords falling into the wrong hands.
Up until now, there wasn’t a universal way to share passkeys securely. That’s where the FIDO Alliance comes in, as they have introduced two draft specifications to address this challenge: the Credential Exchange Protocol (CXP) and the Credential Exchange Format (CXF). These establish a standardized framework for securely transferring credentials, including passwords, passkeys, and more, between credential managers. The transfer process is designed to ensure that sensitive information is not exposed and remains protected by default.
Once these specifications are finalized and standardized, they will be made openly accessible for credential providers to implement. This will empower users with a secure and effortless experience when switching between providers, should they choose to do so.
As someone who juggles a lot of online accounts, the idea of easily and securely moving my passkeys between services sounds like a step forward. I’m really looking forward to seeing how, once implemented, this new system simplifies my digital life and makes online security less of a chore. It’s great to see these major tech companies working together to make the internet a safer and more user-friendly place.