Traditional passwords are no longer secure due to common user mistakes, frequent data breaches, and sophisticated cyber attacks.
Following guidelines like using character combinations, avoiding personal information, and using password managers can significantly improve account security.
Passwordless authentication replaces traditional passwords with methods like magic links or one-time codes sent via email for a more secure login experience.
Multi-factor authentication adds a crucial security layer by requiring a second verification factor, such as an OTP, SMS code, or a physical security key.
Passkeys offer a phishing-resistant alternative to passwords by using device-based biometrics like fingerprints or face ID to create secure cryptographic keys.
Single sign-on (SSO) uses a central identity provider to authenticate a user once, granting them access to multiple applications without separate logins.
Successfully transitioning to modern authentication requires conducting a security assessment, choosing the right methods for your use case, and educating users.
The Q&A covers the security of a central SSO provider and the recovery mechanisms available when a user loses access to their phone for SMS-based authentication.
31:19Wolfgang Ettlinger & Alexander Hurbean
32:32Clemens Hübner
27:32Jasmin Azemović
43:56Mauro Verderosa
30:21Paweł Łukaszuk
1:58:48Thomas Konrad
29:34Reto Kaeser
49:52Yedidya Schwartz
Jobs that call for the skills explored in this talk.
