According to cybersecurity experts, password identification in online services is a thing of the past. In the future, they will be completely replaced by biometric authentication and other means of protection.
Since this year, biometric authentication applications have been available to corporate and home Windows users. You can also activate identity verification methods by sending a code to your phone, other device, or linked account.
Authentication by biometric parameters significantly simplifies the daily use of various services and at the same time complicates the theft of personal data, said Alexey Novikov, Director of Business Development at ESET.
"However, in case of data loss, attackers gain access to the user's biometric profile. Today, the introduction of secure technologies prevents the mass distribution of passwordless authentication, and it costs a lot. Large companies are not always ready to revise the budget, and small and medium-sized businesses can hardly afford this,” Novikov said.
According to Denis Bezkorovayny, co-founder of Proto Group, already in 2022 some of the largest sites and services will begin to refuse to use passwords.
According to the expert, the IT community has long set itself the task of distributing password-free access, there are successful cases of such implementation in the banking and corporate sector.
"Now we are coming to the fact that the password becomes less convenient for the user, and it becomes less problematic for attackers. Because of this, there is a leap towards password-free or passwordless authentication," the expert explained.
It should be noted that passwords can be replaced by authentication methods such as codes, hardware tokens, smart cards, and biometrics.
For example, in Estonia, every resident of the country has a smart card for access to public services, the electronic digital signature of documents, and much more, including password-free authentication on a variety of government and commercial resources.
