Since the inception of the internet, passwords have been the primary authentication factor to gain access to online accounts. Yubico’s recent Global State of Authentication survey of 20,000 employees found that 58 percent still use a username and password to login to personal accounts, with 54 percent using this login method to access work accounts.

This is despite the fact that 80 percent of breaches today are a result of stolen login credentials from attacks like phishing. Because of this, passwords are widely understood by security experts as the most insecure authentication method that leaves individuals, organizations and their employees around the world vulnerable to increasingly sophisticated modern cyber attacks like phishing.


More

CNBC: Data breaches climbed to a record high in 2025. How to protect your personal information

It’s the letter most consumers dread receiving — the notification that your personal information has…

Read More →

Cybersecurity Dive: Top 3 factors for selecting an identity access management tool

It’s not like forgetting the milk at the grocery store. No big deal, just add…

Read More →

Payment Industry Intelligence: Agentic Commerce and the quiet return of Guest Checkout

Agentic commerce is steadily rewiring how digital transactions occur. Instead of shoppers manually navigating screens,…

Read More →


Subscribe to the FIDO newsletter

Stay Connected, Stay Engaged

Receive the latest news, events, research and implementation guidance from the FIDO Alliance. Learn about digital identity and fast, phishing-resistant authentication with passkeys.