shouldiuse.io

Categories

VERDICT

Fidoalliance Review

Skip

Should I use Fidoalliance?

We value your privacy - fidoalliance.org

· 1 week ago

The FIDO Alliance is a standards consortium, not software — there is nothing to buy, so 'dont_buy' simply means 'wrong page if you're shopping.' Vendors join as paying members and pay per-product certification fees; everyone else already benefits from passkeys for free.

Confidence

Medium. Based on 20+ public sources; traditional review data absent — G2 and Trustpilot hits cover passkey vendors and a Canadian mobile carrier, not the Alliance.

Ratings

  • Value for moneyFees exist but amounts aren't published
  • Ease of useStandards body — no software to use
  • Feature depth
  • Support qualityConsortium membership, not a support relationship
  • Security posture

Pricing

Membership & certification

Not published in reviewed sources

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed

Best for

  • Vendors seeking FIDO certification
  • Enterprises standardizing on passkeys
  • Banks facing PSD2 strong-auth rules

Not for

  • Anyone shopping for MFA or passkey software
  • Small teams wanting an out-of-the-box login product
  • Buyers expecting pricing, trials, or support SLAs
  • Developers wanting API docs — use WebAuthn specs instead

Gotchas - check before you buy

medium

Membership and certification fees are opaque; expect discovery calls before any commitment.

medium

Certified product does not equal secure deployment; your vendor choice and rollout still matter.

low

Online 'Fido' complaints on Trustpilot and Reddit concern the Canadian mobile carrier — unrelated to this organization.

Pros and cons

Pros

  • Created and maintains the open passkey standards used industry-wide
  • Runs third-party certification so buyers can verify compliant products
  • Publishes public case studies from Microsoft, RSA, and deployments
  • Expanded into payments, biometrics, and digital credentials programs

Cons

  • Not software — no app, dashboard, or support line to buy
  • Certification and membership costs not publicly listed in reviewed sources
  • Standards only help if your vendors implement them well
  • No public security page found on the Alliance's own site

Sources & method

- 8 sources - Standards body, not software — no product CVEs apply; no known vulnerabilities found in the sources reviewed.

official x3review x2security x2news x1
  • FIDO2 deception attacks via overlays (academic research), Peer-reviewed research demonstrated overlay-based deception attacks against FIDO2 in practice; an attack on implementations and user behavior, not an Alliance product vulnerability.

Key stats

  • Feature depth: 4/5

    Rating

  • Not published in reviewed sources

    Starting price

  • 8

    Sources

  • Analyzed

  • Value for money. Fees exist but amounts aren't published
  • Ease of use. Standards body — no software to use
  • Feature depth: 4/5. Spans auth, payments, biometrics, digital credentials
  • Support quality. Consortium membership, not a support relationship
  • Security posture: 4/5. Runs third-party certification via accredited labs
  • 2013 Founded Launched in early 2013 (Constellation Research)
  • Standards consortium Type Non-profit alliance, not a software product
  • 150+ FIDO Certified products Biometric and second-factor products announced in 2016

Pricing

Membership & certification

Not published in reviewed sources

  • Joining fee plus annual dues
  • Per-product certification fees
  • Discounted derivative certifications

Security

Standards body, not software — no product CVEs apply; no known vulnerabilities found in the sources reviewed.

  • FIDO2 deception attacks via overlays (academic research)Peer-reviewed research demonstrated overlay-based deception attacks against FIDO2 in practice; an attack on implementations and user behavior, not an Alliance product vulnerability.⁶

What users say

As a standards body the Alliance has no product reviews; practitioner threads discuss FIDO2 implementation questions instead.

Companies that use it

  • Microsoft⁷
  • RSA
  • Google
  • DragonSoft Security Associates
Full analysis

Based on 20+ public sources; traditional review data absent — G2 and Trustpilot hits cover passkey vendors and a Canadian mobile carrier, not the Alliance.

Not a product. It's the standards body behind passkeys — vendors pay to join and certify; everyone else uses it free.

Methodology

Based on 20+ public sources; traditional review data absent — G2 and Trustpilot hits cover passkey vendors and a Canadian mobile carrier, not the Alliance.

Read how a report is made.

Sources

  1. FIDO Certification Feesfidoalliance.org
    official
  2. Benefits of FIDO Alliance Membershipfidoalliance.org
    official
  3. FIDO Alliance — Wikipediaen.wikipedia.org
    review
  4. The FIDO Alliance (Constellation Research)constellationr.com
    review
  5. FIDO Security Evaluations (Applus Laboratories)appluslaboratories.com
    security
  6. FIDO2 Deception Attacks via Overlays (ACM)dl.acm.org
    security
  7. FIDO Case Study: Microsoftfidoalliance.org
    official
  8. The FIDO Alliance Launches a Digital Credentials Initiativedigitaltransactions.net
    news

Cite this review

This check for Fidoalliance says Skip.

Put the badge on a page that cites the review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Skip Fidoalliance Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.