Think passwordless is too complicated? Let's clear that up
Summary: Cisco Duo's Janet Ho argues that passwordless authentication is itself multi-factor, pairing a device with a fingerprint, face scan, or PIN that is checked locally and unlocks a digital key that never leaves the device. She cites Forbes figures that 244 million passwords were leaked on a single crime forum and that half of the world's internet users have been exposed to reuse attacks, and addresses myths about PINs, biometric spoofing, biometric data storage, and phishing resistance.
Why it matters: Half of the world's internet users have already been exposed to password reuse attacks, and a single leaked password can unlock several accounts - the exposure is already in your workforce, not a future risk.
Read the original at Cisco Talos ↗
- Topics
- Identity & Access Management
- Related
- FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’ Cyber Risks · Nov 13, 2026Connect Wise Cloud Backup application abused in cross-tenant token sweep Cyber Risks · Oct 19, 2026Sponsored: Specter Ops on the impact of AI agents on Blood Hound Cyber Risks · Sep 20, 2026