NIST updates Digital Identity Guidelines for enhanced security

The US Department of Commerce’s National Institute of Standards and Technology (NIST) has updated its draft guidelines on digital identity, aiming to enhance security and accessibility when accessing government services. The revisions, reflecting feedback received throughout 2023, emphasise the importance of modern digital methods, such as digital credentials on smartphones and traditional identity verification.

Jason Miller, deputy director for management at the Office of Management and Budget, highlighted that the updated guidelines are part of the Biden-Harris administration’s efforts to strengthen anti-fraud measures while ensuring equitable access to services. NIST Director Laurie E. Locascio added that the guidelines aim to manage risks and prevent fraud, making digital services accessible.

One key update area involves expanding guidance on emerging technologies like passkeys and digital wallets, which allow for more secure online transactions and identity verification. NIST also included provisions for those who prefer or need to use traditional identification methods, ensuring that services remain accessible to everyone.

NIST is seeking public comments on these updated guidelines until 7 October 2024, with a webinar scheduled for 28 August to discuss the changes further. These guidelines, once finalised, are expected to equip federal agencies better to counter evolving threats while providing critical services to the public.