Phishing attacks and stolen credentials are responsible for at least 60% of all successful cyber attacks. They can easily be mitigated by applying two-factor authentication based on FIDO. In addition FIDO simplifies the authentication by so called "passwordless login".