FIDO Webinar: How BankID Norway Unifies Passkeys & Biometric Liveness

Why It Matters

BankID Norway’s unified passkey‑biometric model demonstrates a scalable, low‑friction path to secure digital identity, setting a benchmark for global fintech and public‑sector authentication strategies.

Key Takeaways

• BankID Norway integrates passkeys with biometric liveness for end-to-end security.
• Over 4.7 million users perform about 212 authentications annually each.
• Mobile‑first strategy grew BankID app to 3.8 million device‑bound users.
• NFC‑enabled biometric verification simplifies account recovery and key rebinding.
• Balancing security, usability, privacy, and cost ensures sustainable identity assurance.

Summary

The FIDO webinar focused on how BankID Norway has merged passkey technology with biometric liveness detection to create a seamless, fraud‑resistant authentication ecosystem. Hosted by the Phyto Alliance’s CMO, the session featured product manager O Morton and CIO Joe Palmer, who detailed the evolution of Norway’s digital identity framework from its 2004 launch to today’s mobile‑first implementation. Key insights included staggering usage figures—approximately 4.7 million unique users, each authenticating roughly 212 times per year, generating close to one billion transactions annually. The BankID app, now serving 3.8 million users, stores device‑bound keys on smartphones, limiting credential leakage. A newly introduced NFC‑enabled biometric verification flow provides instant e‑ID with presence guarantee, dramatically improving account‑recovery and key‑rebinding processes that previously suffered from high friction and security gaps. Morton highlighted a real‑world fraud incident where a compromised identity was caught during NFC biometric activation, underscoring the system’s ability to detect sophisticated attacks. He also referenced the “iron triangle” of usability, privacy, and security, adding economic viability as a fourth pillar. Approximately 50 % of users must rebind keys every two years due to device loss or upgrades, prompting the need for a robust, low‑friction recovery mechanism. The implications are clear: BankID Norway’s layered approach—combining phishing‑resistant passkeys, biometric liveness, and continuous fraud monitoring—offers a blueprint for other nations and enterprises seeking to balance security, user experience, and cost. Regulators and financial institutions can leverage these lessons to accelerate digital identity adoption while mitigating emerging AI‑driven threats.

Original Description

FIDO Webinar: The Spectrum of Authentication: How BankID Norway Unifies Passkeys & Biometric Liveness

Organizations are grappling with an increasingly diverse and sophisticated threat landscape, including AI-powered phishing campaigns, physical presentation attacks, and scalable, automated injection attacks. Experts from BankID, iProov and FIDO Alliance explored how organizations can combat these growing threats by unifying passkeys with advanced liveness.

This session explored how this transition simplifies the user lifecycle and provides a seamless experience that scales from everyday logins to high-assurance signatures.