mobilcredentials

Mobilcredentials are digital credentials stored on mobile devices that authenticate a user, device, or transaction to a service, app, or physical access system. They may include passwords, tokens, cryptographic certificates, or biometric and passkey-based credentials.

Provisioning and management involve issuing credentials by identity providers or organizations and distributing them to the device through secure channels. They are bound to the user or device and stored in secure hardware or software vaults, such as the device's secure element or trusted keystore, and may be managed via mobile device management (MDM) or enterprise mobility management (EMM).

Key technologies and standards include FIDO2/WebAuthn and passkeys for passwordless authentication; OAuth 2.0 and OpenID Connect for authorization; PKI-based client certificates; and hardware-backed storage with device attestation.

Security and risk considerations include potential exposure if the device is lost or stolen, the need for revocation and remote wipe, and phishing or malware threats. Biometric data are typically stored locally, and policies enable encryption, attestation, and access controls.

Applications include enterprise and cloud service access, secure mobile transactions, and physical access via mobile-enabled door readers. Adoption depends on provider support, device compatibility, user acceptance, and governance frameworks to manage provisioning, revocation, and privacy.