Nymi achieves FIDO2 Certification for the Nymi Band 3.0
- Nymi, Inc
- Mar 17, 2021
- 3 min read
Updated: Mar 11, 2022
Nymi Band™, the standards-based workplace wearable, is now certified as a FIDO2 authenticator. As a member of the FIDO Alliance since 2014, Nymi designed the solution to be compliant with FIDO2 from the ground up and has always been committed to the use of safe, secure, and simple authentication. This certification further deepens that commitment.
Certification was achieved by leveraging the security and privacy of Nymi’s solution to meet the requirements of the FIDO Alliance, providing passwordless access to a variety of third-party applications. With this announcement, any compatible solution and application can use FIDO2 functionality in the Nymi Connected Worker Platform (CWP). Out of the box, this enables a passwordless experience, making the Nymi Band a strong and secure passwordless authentication option.
The Nymi Band is a secure, convenient, hands-free, and private solution for logging into enterprise systems, networks, data, applications, and devices with continuous biometric authentication — without any need to enter credentials such as a username and password or to touch a surface in any given environment. Once a user has authenticated, they can use the Nymi Band as an NFC FIDO authenticator. By leveraging the Nymi Band's continuous authentication, every FIDO transaction can be verified. This prevents unauthorized actors from using the authenticator in cases where a PIN code has been shared or obtained through malicious means. In addition to using Nymi this way, the CWP supports additional use cases such as secure, physical access, social distancing and contact tracing, touchless print solutions, and more – all from one simple and hands-free user experience.
FIDO2 enables users to leverage common devices to easily authenticate to online services in both mobile and desktop environments. The core concepts driving FIDO protocols are 1) Ease of Use, 2) Privacy and Security, and 3) Standardization. Similar to Nymi’s solution pillars (Privacy, Security, and Natural UX), FIDO protocols are designed from the ground up to protect user privacy. The protocols do not provide information that different online services could use to collaborate and track a user across services, and biometric information, if used, never leaves the user’s device.
How the Nymi Band works as a FIDO2 authenticator
As a FIDO2 authenticator, the Nymi Band:
Provides passwordless and two-factor authentication for web applications and services that support FIDO2. The Nymi Band’s continuous biometric verification replaces PIN-based verification. FIDO2 functionality is only available while the user is authenticated.
Implements CTAP2 (Client to Authenticator Protocol) over NFC.
Can store multiple key pairs for multiple relying parties.
Can be registered as a security token with standard services such as Microsoft, Google, and many others.
WebAuth + CTAP Flow
Nymi transforms the customer experience
By bringing FIDO2 certification to the Nymi CWP, we have reimagined the customer experience by radically transforming the way workers connect to their digital space. As a unifying platform, CWP is a powerful solution that simplifies usability while strengthening privacy and security.
Learn more
Please contact us if you’d like to learn more about the Nymi Band or want to book a vendor-agnostic workshop that explains how a human-centric approach to connecting workers will help you achieve your passwordless goals and deliver value across the business.
About FIDO Certification
The FIDO Alliance certifies authentication devices like biometrics and/or security keys, clients, and servers to verify that they comply with FIDO specifications including FIDO2 and meet certain security profiles. This ensures that users can use their FIDO Certified device across all FIDO-enabled web services for a seamless experience. For websites and organizations, they need only to FIDO-enable once and gain access to all FIDO Certified devices in the market.
OEM’s can further differentiate their devices to meet added market requirements by taking part in security level testing — which evaluates how strongly the user’s authentication credentials are protected.
About the FIDO Alliance
The FIDO (Fast IDentity Online) Alliance, fidoalliance.org, was formed in July 2012 to address the lack of interoperability among strong authentication technologies, and remedy the problems users face with creating and remembering multiple usernames and passwords. The FIDO Alliance is changing the nature of authentication with standards for simpler, stronger authentication that define an open, scalable, interoperable set of mechanisms that reduce reliance on passwords. FIDO Authentication is stronger, private, and easier to use when authenticating to online services.
Notice:
FIDO2 has been certified starting with Nymi’s CWP 1.1 release.
This includes support for Microsoft service logon and Windows logon.
FIDO2 is supported but not certified in earlier Nymi Enterprise Edition releases.
This post is very useful and informative. Thank you for sharing such helpful information. sweetypatel
Sometimes ankitabasu fits into moments when I’m just waiting. Waiting for time to pass, for something to finish, or for my head to clear. I don’t treat it like an activity. I just let it be there. I can close it at any point without thinking twice. There’s no feeling of leaving something incomplete, which makes short visits feel perfectly fine.
Reading about Nymi achieving FIDO2 certification for the Band 3.0 really shows how fast secure, passwordless authentication is evolving, especially in high-trust environments. It made me think about how technology can simplify complex processes when done right. During one demanding semester, I remember feeling stuck mid course and realizing I needed Help with online calculas class to understand concepts better while keeping up with deadlines without unnecessary stress.
I found your post about the Nymi Band 3.0 earning FIDO2 certification really interesting, especially how this wearable now lets workers log in to web apps and systems without passwords, using continuous biometric authentication instead. It’s cool to see security and convenience come together like that in workplace tech. Reading it took me back to a busy semester when I was juggling so much that I thought about online class takers just to free up a bit of headspace.
Reading this post about the Nymi Band finally getting FIDO2 certification made me think back to a time I forgot my password right before a big online class sign-in and panicked, so I totally get how liberating a online exam taking service would feel if it just let me get into systems without juggling passcodes. The way the Band uses continuous biometric authentication to quietly log you into apps and devices sounds like it could save so many tiny daily headaches.