Authenticate (FIDO Alliance)
- Next edition
- Oct 18 to 21, 2027
- Where
- JW Marriott San Antonio Hill Country Resort & Spa, San Antonio, TX, USA
- Usually
- U.S.: October; APAC: early June (from 2026)
- Format
- Hybrid
- Organizer
- FIDO Alliance
Editions
- Oct 18 to 21, 2027 · JW Marriott San Antonio Hill Country Resort & Spa, San Antonio, TX, USA
- Oct 19 to 21, 2026 · Omni La Costa Resort & Spa, Carlsbad, CA, USA · concluded
- Jun 2 to 3, 2026 · Grand Hyatt Singapore, Singapore · concluded
What this conference is for
Authenticate is the FIDO Alliance's dedicated conference for passkeys, FIDO2, and passwordless authentication. It is the single best event for going deep on phishing-resistant authentication: the standards (WebAuthn), the deployment realities, and the case studies from organizations that have rolled passkeys out at scale.
When and where
Authenticate U.S. 2027 runs October 18 to 21 at the JW Marriott Hill Country Resort and Spa in San Antonio, Texas, per the official Authenticate site. Registration has not opened yet, and the call for speakers is due to open in early 2027. Authenticate U.S. 2026 ran October 19 to 21 at the Omni La Costa Resort and Spa in Carlsbad, California, in person with virtual options, under the theme "New Frontiers". The program follows the whole account lifecycle, from account creation through digital credentials to authentication for AI agents. In June 2026 the FIDO Alliance added a first Authenticate APAC in Singapore.
Who should attend
Anyone running or planning a passwordless or phishing-resistant MFA program, identity engineers implementing WebAuthn, and product teams adding passkeys to consumer apps. The content is practical and implementation-focused.
What to expect
Deep technical sessions, real deployment data, and the latest on passkey portability and credential exchange. Because it is FIDO-run, it is the authoritative source on where the standards are going.
Coverage
We cover Authenticate in full, given how central passwordless is to where identity is heading. Pair it with our MFA rollout playbook.
Listen: episodes from or about Authenticate (FIDO Alliance)
- #384 - The FIDO Alliance's Next Frontier: Digital Credentials and Wallets · Identity at the Center · 2025-11-10
Covers why the FIDO Alliance is extending from passkeys into digital credentials and wallets, and how the two fit together.
- #242 - Authenticate 2023: Passkeys with Pedro Martinez of Thales Group · Identity at the Center · 2023-10-30
Security and user experience trade-offs of passkeys in financial services, including how platform vendors control passkey synchronization.
Related on Start with Identity
- BlogFIDO Alliance to publish its wallet certification documents and opens a forum for issuers and regulators
At Authenticate 2026 on October 20, the FIDO Alliance said it will publish the Credential Manager Reference Architecture and a Framework for Verifier Identifica
- BlogFIDO and Imprivata survey: frontline authentication friction costs 32,400 hours a year
A Sapio Research survey of 700 IT and security leaders for Imprivata and the FIDO Alliance finds 95% have seen frontline workers work around authentication, 33%
- BlogFIDO Passkey Index 2026: passkeys now carry 36% of sign-ins, and FIDO estimates 7 billion in use
The FIDO Alliance's Passkey Index 2026, built on data from 15 consumer services, finds 36% of successful sign-ins use a passkey, up from 26%, with a 93% success
- CVEStrongKey FIDO Server credential-type confusion, passkey bypass
StrongKey FIDO Server 4.10.0-4.15.0 confused discoverable and non-discoverable credentials. An attacker can complete passkey authentication as the victim. High.
- GlossaryAdversary-in-the-Middle (AitM)
Adversary-in-the-middle (AitM, written AiTM by MITRE) is an attack in which the attacker positions itself between two parties, such as a user and a sign-in serv
- GlossaryAuthentication Policy
An authentication policy is an identity provider rule that decides which authentication methods a user must satisfy to reach a given application, based on condi