--- title: "#fido2 articles | Hashnode" description: "Explore 18 articles tagged #fido2 on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/fido2" --- Tag # #fido2 18 posts · 0 followers [Manu Shukla](https://hashnode.com/@mr-manushukla) · [Jul 30](https://hashnode.com/posts/passkeys-in-india-2026-add-webauthn-login-to-ios-and-android-apps/6a6bd6357de9fff601efb994) ### [Passkeys in India (2026): add WebAuthn login to iOS and Android apps](https://ecorpit.hashnode.dev/passkeys-in-india-2026-add-webauthn-login-to-ios-and-android-apps?utm_source=hashnode&utm_medium=feed) Passkeys in India (2026): add WebAuthn login to iOS and Android apps Summary. Visa Payment Passkey went live in India on 2 July 2026 with IDFC FIRST Bank as the first issuing bank, and it is already u 16 min read · [ecorpit.hashnode.dev](https://ecorpit.hashnode.dev/passkeys-in-india-2026-add-webauthn-login-to-ios-and-android-apps?utm_source=hashnode&utm_medium=feed) [Kishore K Sharma](https://hashnode.com/@kishoreksharma) · [Jul 8](https://hashnode.com/posts/passkeys-explained-why-passwords-are-becoming-obsolete/6a4e8b1d255352cf32090536) ### [Passkeys Explained: Why Passwords Are Becoming Obsolete](https://blogs.kishorek.dev/passkeys-explained-why-passwords-are-becoming-obsolete?utm_source=hashnode&utm_medium=feed) A password is a secret you have to share, then keep secret from everyone you shared it with. Passkeys retire that contradiction: your device keeps a private key, the server keeps a useless public one, and phishing stops working. 9 min read · [blogs.kishorek.dev](https://blogs.kishorek.dev/passkeys-explained-why-passwords-are-becoming-obsolete?utm_source=hashnode&utm_medium=feed) [IAMDevBox](https://hashnode.com/@IAMDevBox) · [Mar 22](https://hashnode.com/posts/aitm-phishing-2026-how-starkiller-and-tycoon-2fa-bypass-your-mfa/69bf3516f52e0a2ae781d3d2) ### [AitM Phishing 2026: How Starkiller and Tycoon 2FA Bypass Your MFA](https://iamdevbox.hashnode.dev/aitm-phishing-2026-how-starkiller-and-tycoon-2fa-bypass-your-mfa?utm_source=hashnode&utm_medium=feed) In early March 2026, two events put MFA bypass back in the spotlight. Europol dismantled Tycoon 2FA — the world's largest phishing-as-a-service platform — while a new suite called Starkiller demonstrated that AitM phishing has evolved from a sophisti... 6 min read · [iamdevbox.hashnode.dev](https://iamdevbox.hashnode.dev/aitm-phishing-2026-how-starkiller-and-tycoon-2fa-bypass-your-mfa?utm_source=hashnode&utm_medium=feed) [Nguyễn Việt Tùng](https://hashnode.com/@nvtung) · [Feb 19](https://hashnode.com/posts/how-browser-ux-shapes-security-more-than-cryptography/6996bf2549e7775e404fb96b) ### [How Browser UX Shapes Security More Than Cryptography](https://devpath-traveler.nguyenviettung.id.vn/how-browser-ux-shapes-security-more-than-cryptography?utm_source=hashnode&utm_medium=feed) Why browser prompts, retries, and permission dialogs influence security more than algorithms 6 min read · [devpath-traveler.nguyenviettung.id.vn](https://devpath-traveler.nguyenviettung.id.vn/how-browser-ux-shapes-security-more-than-cryptography?utm_source=hashnode&utm_medium=feed) [Nguyễn Việt Tùng](https://hashnode.com/@nvtung) · [Feb 19](https://hashnode.com/posts/passwordless-what-worked-what-didnt-what-id-change/6996802b0b8ae0611c70fde8) ### [Passwordless: What Worked, What Didn’t, What I’d Change](https://devpath-traveler.nguyenviettung.id.vn/passwordless-what-worked-what-didnt-what-id-change?utm_source=hashnode&utm_medium=feed) Production lessons from building a passwordless-first PWA with WebAuthn, Feide OIDC, and ASP.NET Core 5 min read · [devpath-traveler.nguyenviettung.id.vn](https://devpath-traveler.nguyenviettung.id.vn/passwordless-what-worked-what-didnt-what-id-change?utm_source=hashnode&utm_medium=feed) [Nguyễn Việt Tùng](https://hashnode.com/@nvtung) · [Feb 19](https://hashnode.com/posts/why-passwordless-alone-is-not-an-identity-strategy/69968f36cec71454c794cd62) ### [Why Passwordless Alone Is Not an Identity Strategy](https://devpath-traveler.nguyenviettung.id.vn/why-passwordless-alone-is-not-an-identity-strategy?utm_source=hashnode&utm_medium=feed) Why WebAuthn needs federation, recovery flows, and lifecycle design to become a real identity strategy 5 min read · [devpath-traveler.nguyenviettung.id.vn](https://devpath-traveler.nguyenviettung.id.vn/why-passwordless-alone-is-not-an-identity-strategy?utm_source=hashnode&utm_medium=feed) [Nguyễn Việt Tùng](https://hashnode.com/@nvtung) · [Feb 18](https://hashnode.com/posts/integrating-oidc-feide-as-fallback-and-recovery/69952b0d53264659b5ecaaa7) ### [Integrating OIDC (Feide) as Fallback and Recovery](https://devpath-traveler.nguyenviettung.id.vn/integrating-oidc-feide-as-fallback-and-recovery?utm_source=hashnode&utm_medium=feed) Combining WebAuthn and Feide OIDC for recovery, federation, and identity continuity in a VueJS + ASP.NET Core PWA 6 min read · [devpath-traveler.nguyenviettung.id.vn](https://devpath-traveler.nguyenviettung.id.vn/integrating-oidc-feide-as-fallback-and-recovery?utm_source=hashnode&utm_medium=feed) [Nguyễn Việt Tùng](https://hashnode.com/@nvtung) · [Feb 17](https://hashnode.com/posts/implementing-webauthn-in-practice/69942900c87a1e4d2b65a53c) ### [Implementing WebAuthn in Practice](https://devpath-traveler.nguyenviettung.id.vn/implementing-webauthn-in-practice?utm_source=hashnode&utm_medium=feed) Implementing FIDO2 with VueJS, ASP.NET Core, SQL Server, and fido2-net-lib in production 7 min read · [devpath-traveler.nguyenviettung.id.vn](https://devpath-traveler.nguyenviettung.id.vn/implementing-webauthn-in-practice?utm_source=hashnode&utm_medium=feed) [Nguyễn Việt Tùng](https://hashnode.com/@nvtung) · [Feb 16](https://hashnode.com/posts/passwordless-pwa-flow-architecture-walkthrough/6992fa12c23a1a73b8f582a0) ### [Passwordless PWA Flow Architecture Walkthrough](https://devpath-traveler.nguyenviettung.id.vn/passwordless-pwa-flow-architecture-walkthrough?utm_source=hashnode&utm_medium=feed) Implementing WebAuthn, Feide OIDC, and secure sessions in a VueJS + .NET Core PWA 6 min read · [devpath-traveler.nguyenviettung.id.vn](https://devpath-traveler.nguyenviettung.id.vn/passwordless-pwa-flow-architecture-walkthrough?utm_source=hashnode&utm_medium=feed) [Nguyễn Việt Tùng](https://hashnode.com/@nvtung) · [Feb 10](https://hashnode.com/posts/webauthn-and-fido2-explained-without-the-spec/698b52ee6ccf20abc76307bb) ### [WebAuthn & FIDO2, Explained Without the Spec](https://devpath-traveler.nguyenviettung.id.vn/webauthn-and-fido2-explained-without-the-spec?utm_source=hashnode&utm_medium=feed) Understanding how WebAuthn works, why it’s secure by design, and what problems it actually solves 6 min read · [devpath-traveler.nguyenviettung.id.vn](https://devpath-traveler.nguyenviettung.id.vn/webauthn-and-fido2-explained-without-the-spec?utm_source=hashnode&utm_medium=feed)