{"id":2462,"date":"2019-08-05T07:00:44","date_gmt":"2019-08-05T14:00:44","guid":{"rendered":"https:\/\/blog.mozilla.org\/security\/?p=2462"},"modified":"2019-08-01T09:59:37","modified_gmt":"2019-08-01T16:59:37","slug":"web-authentication-in-firefox-for-android","status":"publish","type":"post","link":"https:\/\/blog.mozilla.org\/security\/2019\/08\/05\/web-authentication-in-firefox-for-android\/","title":{"rendered":"Web Authentication in Firefox for Android"},"content":{"rendered":"

Firefox for Android<\/a> (Fennec) now supports the Web Authentication API<\/a> as of version 68<\/a>. WebAuthn blends public-key cryptography into web application logins, and is our best technical response to credential phishing. Applications leveraging WebAuthn gain new\u00a0 second factor and \u201cpasswordless\u201d biometric authentication capabilities. Now, Firefox for Android matches our support for Passwordless Logins using Windows Hello<\/a>. As a result, even while mobile you can still obtain the highest level of anti-phishing account security.<\/p>\n

\nhttps:\/\/blog.mozilla.org\/security\/files\/2019\/07\/webauthn-android-fennec-1.mp4<\/a><\/video><\/div>\n

Firefox for Android uses your device\u2019s native capabilities: On certain devices, you can use built-in biometrics scanners for authentication. You can also use security keys that support Bluetooth, NFC, or can be plugged into the phone’s USB port.<\/p>\n

The attached video shows the usage of Web Authentication with a built-in fingerprint scanner: The demo website<\/a> enrolls a new security key in the account using the fingerprint, and then subsequently logs in using that fingerprint (and without requiring a password).<\/p>\n

Adoption of Web Authentication by major websites is underway: Google, Microsoft, and Dropbox all support WebAuthn via their respective Account Security Settings\u2019 \u201c2-Step Verification\u201d menu.<\/p>\n

A few notes<\/h2>\n