Back to posts
January 23, 2019

Passwordless Authentication: The Path Forward

identitysecurityauthentication

Passwords are the weakest link in security. They're phishable, reusable, and hard to manage. Passwordless authentication eliminates these problems.

Methods

Windows Hello for Business:

  • Biometric or PIN tied to device
  • Private key never leaves the device
  • Resistant to phishing

FIDO2 Security Keys:

  • Hardware-based authentication
  • Works across platforms
  • Portable between devices

Microsoft Authenticator:

  • Phone-based authentication
  • Number matching for phishing resistance
  • Convenient for users

Deployment Strategy

Don't go cold turkey. Phase the rollout:

  1. Enable passwordless methods alongside passwords
  2. Encourage adoption with education
  3. Measure usage and satisfaction
  4. Set dates for password deprecation
  5. Enforce passwordless for new accounts

The User Experience

Passwordless is actually easier. No passwords to remember, no password resets, no credential stuffing.