So, a lot of people end up using the same password for multiple services and thats a threat.
If one website is compromised, your other accounts can be at risk too.
A 2019 Verizon report suggests that80% of hacking-related breachesare sparked by using weak or compromised passwords.
Thats why theFIDO (Fast IDentity Online) Allianceis trying to get rid of passwords altogether.
40% off TNW Conference!
This allows you to use your phone or laptop to identify yourself safely to a web service.
And CTAP allows you to use your phone to talk to WebAuthn and complete your authentication.
FIDO2 is also compatible with FIDO UAF and FIDO U2F-based hardware security keys.
It helps its partners with best practices and user-friendly ways to implement authentication through FIDO2 and other compatible standards.
Later, Google started allowing users tologin through biometric authenticationto some of its services on Chrome for Android.
In addition to this, Microsofts Windows 10 is also FIDO2 approved.
However, we still rely on SMS-based authentication, and thats prone to attacks.
Plus, its more reliable and secure than SMS.
Shikiar said that FIDO2-based authentication is seeing a lot of traction with enterprise customers as well.
Plus, with the rising number of cyberattacks this year, its important for companies to protect their data.
So theres the need to ensure that we have the same sort of levels of security available to us.
Plus, these keys dont rely on any kind of web connection or battery life.
So, you’re free to use them at any time.
That figure can make a lot of enterprises think about going password-less.
Some companies are now allowing customers to get rid of passwords.
Last year, Japans networking giantNTT DOCOMO introduced password-less loginsfor its customers.
CVS Health now has over10 million customerswho dont use any password to attain its services.
Ive used this service with Yubicos key on a Windows machine and it works efficiently.
eBay is also allowing customers to login using biometric authentication on iOS and Android.
Another challenge is that not all desktop systems have biometric authentication.
Apple has also started to include TouchID in recently released MacBooks.
Thats why FIDO is putting outeducational materialto instruct consumers and enterprises.
Shikiar is optimistic about the password-less future.
If this happens, it would be easier and far more secure for people to jump in to services.
That’s one heck of a mixed bag.
He likes to say “Bleh.
That’s one heck of a mixed bag.
He likes to say “Bleh.”
