Performing a security action in response to a determination that a computing device is lost or stolen

A system comprising:

• at least one processor;
• and
• memory storing instructions configured to instruct the at least one processor to:
• receive, by a service provider over a network, a communication that identifies an application associated with the service provider that is installed on a computing device of a user, and indicates the computing device as being lost or stolen, wherein the installed application is associated with a FIDO authentication capability of the computing device;
• in response to receiving the communication, performing at least one action related to security and associated with the lost or stolen computing device, wherein the action is selected based on the identified installed application, and the selected action includes at least one of reducing service to the computing device, denying service to the computing device, or requiring authentication from the computing device;
• receive, over the network, a request to mark the lost or stolen computing device as recovered;
• and
• in response to receiving the request, perform at least one of setting a security level of the user to a normal authentication level, or restoring service to the lost or stolen computing device.

A non-transitory computer-readable storage medium storing computer-readable instructions, which when executed, cause at least one processor to:

• mark, in a database, an indication that a computing device of a user has been reported as lost or stolen;
• determine at least one application that has been installed on the computing device, wherein the installed application is used to perform FIDO authentication;
• perform at least one action related to security and associated with the lost or stolen computing device, wherein the action includes at least one of reducing service to the computing device, denying service to the computing device, or requiring authentication from the computing device;
• determine a service provider that is associated with the installed application;
• and
• send a communication to a computing device of the determined service provider, the communication identifying the installed application and indicating that the computing device of the user is lost or stolen.