AWS adds passkey multi-factor authentication (MFA) for root and IAM users

This article announces two new security enhancements from AWS: 1) support for passkeys as a multi-factor authentication (MFA) option for root and IAM users, and 2) enforcement of MFA for root users on AWS accounts, starting with management accounts in AWS Organizations.

Specifically, the article covers:

• An explanation of passkeys, which are cryptographic key pairs used for FIDO2 authentication, replacing traditional passwords.
• How to enable passkey MFA for an IAM user in the AWS console.
• The user sign-in experience with passkey MFA, using QR codes and biometrics like Face ID or Touch ID.
• AWS's plan to enforce MFA for root users, starting with management accounts in AWS Organizations, with a grace period before making it mandatory.
• The regional availability of these new security features.