Standard
Revision 4 of NIST's Digital Identity Guidelines, covering identity proofing (63A), authentication (63B) and federation (63C). US federal agencies must follow it, and many banks and auditors treat it as the benchmark.
The startup says its SIM-based login now works across AT&T, T-Mobile and Verizon. Here is what the company claims, what independent reporting confirms, and the questions a bank should ask before a pilot.
The Central Bank of the UAE gave banks nine months to stop sending one-time passcodes by text and email. The deadline has passed; the playbook is worth studying.
Revision 4 keeps SMS codes on the permitted list, with strings attached, and adds synced passkeys as a phishing-resistant alternative. The strings read like a migration plan.
Passkeys that sync across a user’s devices trade some control for usability. Here is what stays phishing-resistant, and what moves to the sync account.