Scheduled maintenance will take place between 6:00 PM ET and 7:00 PM ET on March 10th, 2026. During that time, this site may be temporarily unavailable for a period of approximately two minutes.
Publications
Digital Identity Guidelines: Authentication and Authenticator Management
Documentation
Topics
Date Published: July 2025
Supersedes:
SP 800-63B (03/02/2020)
Author(s)
David Temoshok (NIST), James Fenton (Altmode Networks), Yee-Yin Choong (NIST), Naomi Lefkovitz (NIST), Andrew Regenscheid (NIST), Ryan Galluzzo (NIST), Justin Richer (Bespoke Engineering)
This guideline focuses on the authentication of subjects who interact with government information systems over networks to establish that a given claimant is a subscriber who has been previously authenticated. The result of the authentication process may be used locally by the system performing the authentication or asserted elsewhere in a federated identity system. This document defines technical requirements for each of the three authenticator assurance levels. The guidelines are not intended to constrain the development or use of standards outside of this purpose. This publication supersedes NIST Special Publication (SP) 800-63B.
This guideline focuses on the authentication of subjects who interact with government information systems over networks to establish that a given claimant is a subscriber who has been previously authenticated. The result of the authentication process may be used locally by the system performing the...
See full abstract
This guideline focuses on the authentication of subjects who interact with government information systems over networks to establish that a given claimant is a subscriber who has been previously authenticated. The result of the authentication process may be used locally by the system performing the authentication or asserted elsewhere in a federated identity system. This document defines technical requirements for each of the three authenticator assurance levels. The guidelines are not intended to constrain the development or use of standards outside of this purpose. This publication supersedes NIST Special Publication (SP) 800-63B.
Hide full abstract
Keywords
authentication; authentication assurance; credential service provider; digital
authentication; passwords
Control Families
None selected
