Glossary: MFA, Access Control and Passwords

security key

Also written: security keys, FIDO2 security key

A hard token you plug in by USB or tap by NFC. It signs a website's challenge with a private key that never leaves it, and it refuses fake sites, so it is phishing-resistant.