Most security key projects plan the rollout and stop there. Then, keys get lost, people leave, new laptops arrive with different ports and an auditor can't accurately track active keys. FIDO2 security key lifecycle management covers everything after the purchase order: setup, backup and recovery, ongoing optimization, replacement and upgrades. This guide gives you a policy and a checklist for each of the four stages, so your keys keep protecting accounts for years.

The badge on your employees' lanyards can do far more than open a door. Smart cards for secure access combine physical entry, computer login, digital signatures and even payments on one credential, if you choose the right card type. The wrong choice can result in cards being cloned by thieves, a mismatch between a card and a reader, or required deployment of new cards when systems are updated or changed. This guide compares the main card technologies, explains government PIV requirements, and gives you a checklist for buying cards and readers that work together.

Which authentication token uses event-based algorithms for passwords? An event-based OTP token, also called an HOTP token. Instead of changing its code every 30 seconds, it creates a new one-time password each time you press its button. It runs on the open HOTP algorithm from the OATH initiative and needs no clock, no phone and no network. This guide explains how the algorithm works, how it compares with time-based TOTP, and where an event-based token is the right choice.