CYBERSECURITY | HID pushes passwordless authentication in line with BSP cybersecurity mandates

Global identity solutions provider HID is rolling out its latest FIDO-certified authentication technologies in the Philippines to help organizations meet new cybersecurity regulations set by the Bangko Sentral ng Pilipinas (BSP).
Under the updated IT risk management framework of the Anti-Financial Account Scamming Act (AFASA), financial institutions and related enterprises must implement stronger, phishing-resistant authentication methods by June 25, 2026. The new directive is designed to strengthen fraud management and identity verification, moving the industry beyond reliance on passwords and one-time passcodes.
The regulation follows alarming trends in cybercrime. Forbes reported that 16 billion passwords were compromised in a global breach earlier this year, while local authorities recorded a 35% increase in online scams in the Philippines over the past two years.
To address these threats, HID introduced its Enterprise Passkey Management (EPM) solution alongside an expanded portfolio of FIDO-enabled devices. The subscription-based service enables organizations to issue, manage, and revoke credentials remotely with full lifecycle visibility, simplifying compliance and large-scale deployment.
“Passwordless authentication is no longer optional—it is now a regulatory requirement in the Philippines,” said Sean Dyon, Vice President and Head of HID’s Authentication Business Unit. “Our next-generation FIDO portfolio gives enterprises the hardware diversity and centralized management capabilities needed to deploy passkeys at scale while enhancing overall cybersecurity.”
Expanded Device Lineup
HID’s new range of hardware offers flexibility for enterprises with varying needs:
Crescendo Keys – Updated for improved ergonomics and accessibility, supporting FIDO2, PKI, OATH, and PIN reset.
Crescendo Cards – Dual-purpose badges that provide both physical access to facilities and passwordless digital authentication.
OMNIKEY 5022 Contactless Reader – A cost-effective option for secure workstation logins.
The lineup also includes Seos® FIDO-enabled and MIFARE DESFire EV3 FIDO-enabled cards, which unify digital authentication and physical access control in a single credential.
All devices are designed to integrate with Microsoft Entra ID and other major identity providers, allowing enterprises to adopt passwordless authentication without overhauling existing systems.
With the BSP deadline less than a year away, HID positions its FIDO solutions as a timely response for Philippine financial institutions and enterprises facing increasing pressure to secure digital identities against a rising tide of cyber threats.