Access Phishing Resistance

Access Phishing Resistance is a security identity control that reduces success of credential theft attacks for authorization and privilege control. It uses passkeys, hardware-backed factors, and origin checks so teams can protect sign-in flows while keeping evidence, reliability, and public-safe operational boundaries clear.

“The security team used Access Phishing Resistance when a role gained new permissions, so the team could protect sign-in flows before the risk review began.”