61 Articles Found
Let’s look at the natural progression of life. We’re born into this world, we crawl, then we learn to walk and ultimately to run. Passwords are a great example of a security control that has outlived its useful life.
For those wondering what "passwordless" even means - here’s a quick definition: Passwordless authentication establishes a strong assurance of a user's identity without relying on passwords. Join us as we dive into the new world passwordless authentication.
Thankfully technology never stands still. While the government has struggled with their passwordless journey over the last 16 years, the commercial world, struggling under the constant barrage of credential breach after credential breach and after relying for years on the password as the only thing standing between an attacker and their data, finally cried uncle. From this pain, WebAuthn was born.
With any journey it is understood that things may not go exactly to plan, and despite the challenges, there is a clear desire in the market to realize a passwordless reality. One firm I spoke with told me, “When I think of passwordless, I think about the next five years, not the next 12 months.”
Can passwordless authentication be trusted? “If someone steals my password, I can change my password. If someone steals my fingerprint, what do I do then?” Every new feature we introduce to our users is potentially a new tactic we provide our adversaries. But don't worry, we made an app for that.
