FIDO Alliance’s authentication agenda among Black Hat USA 2025 discussion points

Black Hat USA 2025 isn’t just about vulnerability research—it’s also emerging as a showcase for FIDO Alliance initiatives around strong, phishing-resistant authentication. Industry stakeholders will highlight how passkeys and device-bound authenticators are becoming core to enterprise identity hygiene.

FIDO’s strategic signals at Black Hat

Although FIDO doesn’t run official briefings at Black Hat, the Alliance made headlines during last year’s conference when the CISA/FBI “Secure by Demand” guide was unveiled—a move encouraging vendors to build phishing-resistant authentication into software products and pipelines by default  . Expect ongoing conversation in vendor booths, briefings, and breakout sessions referencing FIDO-based best practices.

Focus on passkeys and device authentication adoption

FIDO-affiliated firms are expected to underscore how FIDO2 standards like passkeys and CTAP/WebAuthn are evolving from optional features into expected baseline controls. OneSpan and other board members recently highlighted the rise of syncable vs. device-bound passkeys, pointing out the tradeoff between convenience and enterprise control.

Intersection with AI and account security

With AI increasingly automating user behavior and session activity, FIDO’s model of requiring user presence (particularly in device-bound credentials) gains relevance. FIDO leadership at recent plenaries has discussed how agentic AI workflows may challenge traditional passkey paradigms, suggesting FIDO standards themselves may evolve to support automated credential usage safely.

Broader FIDO Alliance ecosystem engagement

Beyond Black Hat, FIDO is actively designing sessions and educational content:

How the industry is responding

While FIDO doesn’t formally grant Maker sessions at Black Hat, its standards are quietly shaping vendor messaging and procurement demands. Software vendors and exhibitors appear prepared to frame passes, credentials, and device onboarding strategies in the context of CISA endorsement and enterprise zero-trust mandates.

Real-world adoption metrics remain uneven. Analysts estimate billions of passkeys are now deployed globally, yet many enterprises struggle with policy enforcement around syncable credentials versus device-bound keys—especially in high-security environments.

Black Hat offers a unique vantage point to observe how FIDO standards are being operationalized. Pay attention to vendor booths, tools demos, and breakout discussions that mention “phishing-resistant account setup” or reference CISA’s Secure‑by‑Demand guidance as evidence of FIDO’s growing influence.