SP 800-63B-4
The authentication and lifecycle management volume of the NIST Digital Identity Guidelines. It specifies security requirements for digital identity authentication and account recovery, is widely adopted by U.S. federal agencies, and serves as a de facto reference standard for the design of identity authentication products worldwide.
Timeline (last 90 days)
NIST has formally stopped accepting security questions as an account recovery method in SP 800-63B-4.
SP 800-63B-4 is the authentication and lifecycle management volume of the digital identity guidelines published by the U.S. National Institute of Standards and Technology (NIST).
SP 800-63B-4 is not a mandatory law, but it is widely adopted by U.S. federal agencies and has become a de facto reference standard for the design of identity authentication products worldwide.
Account recovery methods recognized by SP 800-63B-4 include four categories: recovery codes or backup codes, registered authenticators or devices, out-of-band communication channels, and human-assisted identity verification.
All Facts (4)
NIST has formally stopped accepting security questions as an account recovery method in SP 800-63B-4.
50%UnverifiedSP 800-63B-4 is the authentication and lifecycle management volume of the digital identity guidelines published by the U.S. National Institute of Standards and Technology (NIST).
50%UnverifiedSP 800-63B-4 is not a mandatory law, but it is widely adopted by U.S. federal agencies and has become a de facto reference standard for the design of identity authentication products worldwide.
50%UnverifiedAccount recovery methods recognized by SP 800-63B-4 include four categories: recovery codes or backup codes, registered authenticators or devices, out-of-band communication channels, and human-assisted identity verification.
50%