Skip to content

FIDO MDS Migration

Tim Cappalli edited this page Oct 18, 2026 · 3 revisions

Moving your entry to FIDO's Metadata Service

Important

These instructions are for credential managers being used in the consumer passkey ecosystem.

For high assurance credential managers/authenticators used in workforce scenarios (e.g., attested device-bound passkeys with or without certification), follow the process documented here: https://fidoalliance.org/mds-portal-user-guide-for-vendor-users/

Account setup

The first step is to create a FIDO MDS account. This account will be used to manage your credential manager's metadata.

Note

The instructions below are a simplified version of the full instructions which are located here

  1. Go to https://mymds.fidoalliance.org/register.
  2. Read and agree to the terms.
  3. Fill in the required information. If you are not a formal organization/company, put your credential manager's name in the "Company Name" field and use your contact details for the various other Company fields.
  4. Wait for approval. You will receive an email when your account is created.

Add an entry

  1. Go to Metadata Management
  2. Click "Add New"
  3. Click the "Sample FIDO2 Non-CTAP" button
  4. Update the following fields and leave all others alone:
  • authenticationAlgorithms: list supported authentication algorithms supported by the credential manager
  • aaguid: your credential manager's AAGUID
  • friendlyNames: en-us is required. Populate additional languages or remove them.
  • description: put a description of your credential manager (supported credential types, platforms, etc)
  • providerLogoDark: an SVG of the credential manager's icon for use on dark backgrounds, formatted as a base64 encoded data URL (additional requirements specified here: Windows Utility, macOS Utility)
  • providerLogoLight: an SVG of the credential manager's icon for use on light backgrounds, formatted as a data URL (additional requirements specified here: Windows Utility, macOS Utility)
  • cxConfigURL: this is not yet used, remove it

Here's an example entry:

{
  "authenticatorVersion": 1,
  "upv": [],
  "tcDisplay": [],
  "attestationRootCertificates": [],
  "matcherProtection": [
    "software"
  ],
  "keyProtection": [
    "software"
  ],
  "authenticationAlgorithms": [
    "secp256r1_ecdsa_sha256_raw"
  ],
  "publicKeyAlgAndEncodings": [
    "cose"
  ],
  "legalHeader": "Submission of this statement and retrieval and use of this statement indicates acceptance of the appropriate agreement located at https://fidoalliance.org/metadata/metadata-legal-terms/.",
  "aaguid": "00000000-1111-1111-0000-111111111111",
  "friendlyNames": {
    "en-US": "MyExample Credential Manager",
    "ja-JP": "MyExample 資格情報マネージャー"
  },
  "description": "MyExample Credential Manager supporting passkeys, passwords, and OTPs on all platforms",
  "protocolFamily": "fido2",
  "schema": 3,
  "providerLogoDark": "data:image/svg+xml;base64,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",
  "providerLogoLight": "data:image/svg+xml;base64,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",
  "attestationTypes": [
    "none"
  ],
  "multiDeviceCredentialSupport": "implicit"
}

Clone this wiki locally