Application Phishing Resistance

Application Phishing Resistance is a security identity control that reduces success of credential theft attacks for software security and abuse resistance. It uses passkeys, hardware-backed factors, and origin checks so teams can protect sign-in flows while keeping evidence, reliability, and public-safe operational boundaries clear.

“The security team used Application Phishing Resistance when a form received unusual input, so the team could protect sign-in flows before the risk review began.”