Time to ditch your password and go with passwordless authentication

I'm still shocked that another one of these comes out almost every day. The core problem with this one is the uptime, 99.5% is going to be a challenge. I know the other planes get higher, but are they enough? What user management system is okay for anything less than 3-nines.

When we wrote ours, Authress, our customers kept coming back to us saying we need your AuthN and authZ solution to be 4-nines. So ours is 5-nines, and it's just as cheap at the lowest level. There are so many things that are table-stakes in this arena, you need to offer all them to be a real competitor.

In Internxt, we are slowly transitioning to a passwordless system by using multifactor authentication solutions and security keys, it helps our team to deliver an outstanding customer experiences without worrying about cybersecurity issues. If you only use a password to authenticate a user, it leaves a trace for a cyberattack.

If the password is weak or was exposed elsewhere, how do you know if it is actually the user signing in with the credentials and not an attacker. By requiring a second form of authentication, you increase security. The additional factor is not easy for an attacker to obtain or duplicate. MFA and Security keys are the easiest most cost effective cyber security solution in our industry.

Passwordless authentication reduces the burden on your IT staff by minimizing or eliminating password reset requests and decreases the risks of cyberattacks.

One thing to highlight is that I think most people are confused about passwordless authentication, especially Biometric authentication.

Websites won't have access to your face or fingerprints, nor will government organizations. Unlike passwords, your fingerprints are not stored everywhere, or shared with everyone. Your fingerprints can be safely removed from your device at any time of your choosing.

It is because it uses private/public keys exchanges to validate your biometric login with your choice of authenticator device (phones, laptops, etc...), to verify your identity and allow you access to resources.

Are there any benefits (beyond convenience) to passwordless authentication?

"60% of large and global enterprises and 90% of midsize enterprises will implement passwordless methods in more than 50% of use cases by the end of 2022." Presumably because of the associated cost?