Product Documentation

As mentioned in the getkeysinfo API, users will want the option to manage their FIDO credentials. To allow applications to enable end users to manage their registered FIDO credentials at RP sites, SKFS provides the update operation where users may change the "nicknames" (displayName) they give their FIDO credentials as well as set these FIDO credentials as active or inactive.

The ability to disable a FIDO credential is a crucial aspect of the FIDO protocol, as it provides an added layer of security for end-users. In case of a compromised or lost security key, being able to disable or suspend the corresponding FIDO credential helps to prevent unauthorized access to the user's accounts or sensitive information. This provides end-users with greater control over their digital identities by enabling them to revoke access to their accounts in the event of a security breach or loss of their security key. This reduces the risk of unauthorized access to their accounts and mitigates the potential damage caused by data breaches. It makes it more difficult for attackers to impersonate the user by using a stolen security key, as the corresponding FIDO credential can be quickly disabled, rendering the key useless for authentication.