Since the inception of the internet, passwords have been the primary authentication factor to gain access to online accounts. Yubico’s recent Global State of Authentication survey of 20,000 employees found that 58 percent still use a username and password to login to personal accounts, with 54 percent using this login method to access work accounts.

This is despite the fact that 80 percent of breaches today are a result of stolen login credentials from attacks like phishing. Because of this, passwords are widely understood by security experts as the most insecure authentication method that leaves individuals, organizations and their employees around the world vulnerable to increasingly sophisticated modern cyber attacks like phishing.


More

GBFR: Beyond OTP: How Banks Can Build a Passkey Control Plane

Passkeys can reduce exposure to phishing and shared-secret theft, but the banking opportunity depends on…

Read More →

Biometric Update: Mexico’s new banking rules signal a new era for biometric identity verification

Opening a bank account today looks very different than it did a decade ago. Behind…

Read More →

SFWeekly: The End of Passwords? Preparing Your Company for Passkeys

Key Takeaways How many passwords did you reset last month? If you’re like most people,…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.