They need to be supplemented by solutions like multi-factor authentication, or biometric verification. Passwords are frequently exposed through data breaches, stolen / leaked credentials, or phishing attacks.Weak or default passwords are regularly exploited by attackers.Variants of the same password are frequently used to get around password age or complexity requirements.People will often re-use passwords between different services.Regardless of how much education goes into encouraging good password practice, the reality is that: A “problem” I think we all accept relates to use of (specifically bad practice with) passwords. When exactly it will exit preview is anyone’s guess… but I’d speculate an upcoming industry event may yield some news! Irrespective, it’s highly relevant and exciting functionality that has the potential to siginificantly reduce the risk of data breach through poor password practice.īefore we get into some detail, why is passwordless such a big deal? I spent a bit of time covering the concept in a theatre session I ran this last week at Future Decoded. The concept of “passwordless” doesn’t really need explaining… the clue is in the name 🙂 It is something that’s had a lot of press in recent months though as it’s matured to the point of being near GA for Azure AD.

Last weekend I finally managed to grab some time to get to grips with one piece of the passwordless puzzle I hadn’t had a chance to play with: YubiKey. Passwordless Authentication is a topic I’ve been keen to write about for a while now.

Cheap yubikey alternative