Password-Only Authentication
As password-only sign-in has become a prominent security threat, new defenses such as Multi-Factor Authentication (MFA), Password Managers, Facial Recognition, etc. have come around to increase user security.
But as these security requirements and standards vary depending on the specific site or application, remembering your password and how to sign-in for each of those sites may become too complex, and still not as secure as it needs to be.
image: FIDO Alliance
Passwordless Authentication
You may be accustomed to using your mobile phone, or computer to sign into a smart TV or other device to watch live TV, or a streaming service. This same kind of software will be used to sign into different websites and applications, solely using your phone.
An application on your phone will contain a specific passkey that will allow access to all of these sites, similar to MFA and Facial Recognition for unique user-specific access across all Internet browsers.
The goal for Microsoft, Apple, and Google is eventually to entirely get rid of passwords, which will in turn provide increased security by eliminating the potential for users passwords to be exploited.
These changes are set to come into play over the course of the next year, according to Apple.
EPOCH always suggests enabling MFA whenever possible. Please contact us with any questions.