Passwordless authentication is a new method of user authentication that does not require the use of a password. Instead, other factors or means are used to verify the user's identity. These factors can be biometric elements such as fingerprint, facial recognition or voice. Multi-factor authentication is based on combining two or more such factors, giving rise to smart cards or smart apps. We can also find token-based authentication, which requires a physical device with which, through the generation of single-use authentication codes, you can access your information and services.
We believe that passwordless authentication is a more secure method than traditional passwords. A traditional password can be hacked and imitated, and most people have the same password to access different accounts or services, which increases the percentage of being attacked, but for example, a person's fingerprint is unique and unmatched. Phishing attacks loom large today as new methods of information theft emerge.
"Still, a person's biometrics are not entirely impassable. A hacker can steal the fingerprint of a company director and gain access to all the confidential data he or she holds. The problem comes when a person's fingerprint or the pupil of the eye are things that we cannot modify. In case of theft, we would have to look for a much stronger solution. " Says Julen, our CEO.
That is why at Ironchip we are committed to security through location, mainly for two reasons: A person cannot be in two places at the same time and, most importantly, the location is something that can be changed.
With the Passwordless authentication methods we have discussed, the risk of phishing attacks is reduced, since the access information is more precise, which makes it more difficult for the attacker to search for the same information to authenticate himself. In addition, with Passwordless methods, we avoid having to remember passwords and password management, thus streamlining business processes.
Overall, passwordless authentication is a good approach for the future, more secure than traditional methods and more useful for online users.