Table of Contents - X.1283 (09/2024) - Threat analysis and guidelines for securing password and passwordless authentication solutions

1	Scope
2	References
3	Definition
	3.1	Terms defined elsewhere
	3.2	Terms defined in this Recommendation
4	Abbreviations and acronyms
5	Conventions
6	Security overview
	6.1	User authentication
	6.2	Password security risks
	6.3	Password maintenance guidelines
7	Measures to protect password authentication
	7.1	Preventions
	7.2	Risk-based authentication
	7.3	Risk based authentication (RBA) advantages
8	Passwordless authentication
	8.1	Security risks and guidelines for passwordless authentication
	8.2	Steps towards passwordless authentication
	8.3	Phishing-resistant multi-factor authentication (MFA)
	8.4	Threats and mitigation measures for passwordless solutions
Bibliography