Understanding FIDO L2 Certification

FIDO2 security tokens offer a more secure and easier passwordless authentication. However, not all keys provide the same level of security. This is where FIDO Authenticator Security Certification comes in.

The FIDO Alliance has defined different levels of authenticator security certification. Level 2 (L2) extends Level 1 (L1) by introducing additional security requirements.

What’s the Difference Between L1 and L2?

L1 covers the baseline security requirements for FIDO authenticators. L2 takes it a step further by requiring a FIDO-approved restricted operating environment and approved cryptography to help protect security-critical functions against scalable software attacks.

Depending on the design, this environment could utilize technologies such as a Trusted Execution Environment (TEE) or Secure Element (SE). But a secure chip by itself does not automatically qualify an authenticator for L2 certification.

It is also important to note that L2 is a security certification level and not a new version of the FIDO2 protocol, it gives extra confidence against certain threats.

Why Does L2 Matter?

There are a variety of FIDO2 security tokens with different connectivity options and security features. Make sure to select one that meets your needs.

When it comes to the choosing of FIDO2 authenticators, the L2 certificate is a important reference for businesses, public organizations and individual users with higher security needs. It does not guaranty protection against every possible attack, but it does provide independently assessed evidence that the authenticator can meet defined security requirements.

As a member of the FIDO Alliance, Excelsecu offers FIDO2 security keys that meet the L2 security requirements. For more details, visit https://www.excelsecu.com/productdetail/fido2nfckey69.html and FIDO Alliance’s Authenticator Certification page.