Released in time for Cybersecurity Awareness Month, a month recognised across the globe as an opportunity to double-down on security awareness efforts, the global study provides evidence that the need to migrate from traditional passwords and the risks they pose continues to grow, and is even more apparent in a work from anywhere world. The report suggests that while passwords may not be going away completely, 92 percent of respondents believe passwordless authentication is the future of their organisation.
Passwordless authentication reduces password related risks by enabling users to login to devices and applications without the need to type in a password. Technologies such as biometric authentication, single-sign-on (SSO) and federated identity streamline the user experience for employees within an organisation, while still maintaining a high level of security and complete control for IT and security teams.
Key findings from the report include:
Problems with passwords are still an ongoing struggle for organisations. The amount of time that IT teams spend managing users’ password and login information has increased year over year. In fact, those surveyed suggest that weekly time spent managing users’ passwords has increased 25 percent since 2019. Given this, the majority (85 percent) of IT and security professionals agree that their organisation should look to reduce the number of passwords that individuals use on a daily basis. Additionally, almost all (95 percent) respondents surveyed say there are risks to using passwords which could contribute to threats in their organisation, notably human behaviors like password reuse or password weakness.
When it comes to managing an organisation, security is a core challenge for IT teams. However, it is the lack of convenience and ease of use that employees care about. Security is the main source of frustration for the IT department, particularly when issues are often derived from user behaviour when managing passwords. The top three frustrations for IT teams include users using the same password across applications (54 percent), users forgetting passwords (49 percent) and time spent on password management (45 percent). For employees, the issues lie in convenience. Their top three frustrations are changing passwords regularly (56 percent), remembering multiple passwords (54 percent) and typing long, complex passwords (49 percent).
Better security (69 percent) and eliminating password related risk (58 percent) are believed by respondents to be the top benefits of deploying a passwordless authentication model for their organisation’s IT infrastructure. Time (54 percent) and cost (48 percent) savings are also noted benefits of going passwordless. Meanwhile, for employees a passwordless authentication model would help to address efficiency concerns. Over half (53 percent) of respondents report that passwordless authentication offers the potential to provide convenient access from anywhere, which is key given the shift towards remote work that is likely here to stay.
While going passwordless can provide a more secure authentication method, there are challenges in the deployment of a passwordless model. Respondents report the initial financial investment required to migrate to such solutions (43 percent), the regulations around the storage of the data required (41 percent) and the initial time required to migrate to new types of methods (40 percent) as the biggest challenges for their organisation to overcome. There are also some concerns around resistance to change. Three quarters of IT and security professionals (72 percent) think that end users in their organisation would prefer to continue using passwords, as it is what they are used to.
When it comes to identity and access management, 85 percent do not think passwords are going away completely. Yet, over nine in 10 respondents (92 percent) believe that delivering a passwordless experience for end-users is the future for their organisation. There is a clear need to find a solution that combines passwordless authentication and password management in today’s organisations.
“As many organisations transition to a long-term remote work culture, giving your employees the tools and resources to be secure online in their personal lives as well as in the home office is more important now than ever,” said Gerald Beuchelt, Chief Information Security Officer at LogMeIn. “This report shows the continued challenge that organisations face with password security and the need for a passwordless authentication solution to enable both IT teams and employees to operate more efficiently and securely in this changing environment.”