FIDO Alliance

FIDO Webinar: How BankID Norway Unifies Passkeys & Biometric Liveness

The FIDO webinar focused on how BankID Norway has merged passkey technology with biometric liveness detection to create a seamless, fraud‑resistant authentication ecosystem. Hosted by the Phyto Alliance’s CMO, the session featured product manager O Morton and CIO Joe Palmer, who detailed the evolution of Norway’s digital identity framework from its 2004 launch to today’s mobile‑first implementation. Key insights included staggering usage figures—approximately 4.7 million unique users, each authenticating roughly 212 times per year, generating close to one billion transactions annually. The BankID app, now serving 3.8 million users, stores device‑bound keys on smartphones, limiting credential leakage. A newly introduced NFC‑enabled biometric verification flow provides instant e‑ID with presence guarantee, dramatically improving account‑recovery and key‑rebinding processes that previously suffered from high friction and security gaps. Morton highlighted a real‑world fraud incident where a compromised identity was caught during NFC biometric activation, underscoring the system’s ability to detect sophisticated attacks. He also referenced the “iron triangle” of usability, privacy, and security, adding economic viability as a fourth pillar. Approximately 50 % of users must rebind keys every two years due to device loss or upgrades, prompting the need for a robust, low‑friction recovery mechanism. The implications are clear: BankID Norway’s layered approach—combining phishing‑resistant passkeys, biometric liveness, and continuous fraud monitoring—offers a blueprint for other nations and enterprises seeking to balance security, user experience, and cost. Regulators and financial institutions can leverage these lessons to accelerate digital identity adoption while mitigating emerging AI‑driven threats.