Early access: 15,547 bills from the current Congress so far, more added daily. Data from Congress.gov, GovInfo and the House and Senate vote records, updated Oct 13, 2026.
Public Law TrackerPLTPublic Law Tracker
S. 4784IntroducedSenate · nowHousePresidentLawIn committee
Sec. 1638 · S. 4784

Phishing resistant authentication for defense

Division A — Department of Defense authorizations › Title XVI — Cyberspace-related matters › Subtitle B — Matters relating to Department of Defense cybersecurity and information technology

Read this section in the full bill →

This section appears in one version only, so there is nothing to compare yet.

(a) In general Not later than two years after the date of the enactment of this Act, the Secretary of Defense shall take such actions as may be necessary to ensure that only phishing-resistant authentication is used by all personnel across the Department of Defense, with an exception process for applications where the use of a phishing-resistant authenticator may not be feasible or practicable. (b) Definition of phishing resistance In this section, the term phishing resistance has the meaning given such term in National Institute of Standards and Technology Special Publication 800–63B–4 (relating to Digital Identity Guidelines), or any successor publication.

Sec. 1638: Phishing resistant authentication for defense · Public Law Tracker