LastPass by LogMeIn today released findings of a new report commissioned to better understand the current state of passwords in organisations today, and how these trends are driving passwordless authentication models moving forward. The report, “From Passwords to Passwordless” was conducted in partnership with Vanson Bourne and highlights the critical need to address password problems as remote work becomes the new normal.
Released in time for Cybersecurity Awareness Month, a month recognised across the globe as an opportunity to double-down on security awareness efforts, the global study provides evidence that the need to migrate from traditional passwords and the risks they pose continues to grow, and is even more apparent in a work from anywhere world. The report suggests that while passwords may not be going away completely, 92 percent of respondents believe passwordless authentication is the future of their organisation.
Passwordless authentication reduces password related risks by enabling users to login to devices and applications without the need to type in a password. Technologies such as biometric authentication, single-sign-on (SSO) and federated identity streamline the user experience for employees within an organisation, while still maintaining a high level of security and complete control for IT and security teams.
Key findings from the report include:
- Organisations Still Have a Password Problem
Problems with passwords are still an ongoing struggle for organizations. The amount of time that IT teams spend managing users’ password and login information has increased year over year. In fact, those surveyed suggest that weekly time spent managing users’ passwords has increased 25 percent since 2019. Given this, the majority (85 percent) of IT and security professionals agree that their organisation should look to reduce the number of passwords that individuals use on a daily basis. Additionally, almost all (95 percent) respondents surveyed say there are risks to using passwords which could contribute to threats in their organisation, notably human behaviors like password reuse or password weakness.
- Security Priorities Are at Odds with User Experience
When it comes to managing an organisation, security is a core challenge for IT teams. However, it is the lack of convenience and ease of use that employees care about. Security is the main source of frustration for the IT department, particularly when issues are often derived from user behaviour when managing passwords. The top three frustrations for IT teams include users using the same password across applications (54 percent), users forgetting passwords (49 percent) and time spent on password management (45 percent). For employees, the issues lie in convenience. Their top three frustrations are changing passwords regularly (56 percent), remembering multiple passwords (54 percent) and typing long, complex passwords (49 percent).
- Security and Eliminating Risk Are Seen as Primary Benefits of Passwordless Authentication
Better security (69 percent) and eliminating password related risk (58 percent) are believed by respondents to be the top benefits of deploying a passwordless authentication model for their organisation’s IT infrastructure. Time (54 percent) and cost (48 percent) savings are also noted benefits of going passwordless. Meanwhile, for employees a passwordless authentication model would help to address efficiency concerns. Over half (53 percent) of respondents report that passwordless authentication offers the potential to provide convenient access from anywhere, which is key given the shift towards remote work that is likely here to stay.
- Cost, Regulations and Time Are Cited as Top Challenges of Passwordless Deployment
While going passwordless can provide a more secure authentication method, there are challenges in the deployment of a passwordless model. Respondents report the initial financial investment required to migrate to such solutions (43 percent), the regulations around the storage of the data required (41 percent) and the initial time required to migrate to new types of methods (40 percent) as the biggest challenges for their organisation to overcome. There are also some concerns around resistance to change. Three quarters of IT and security professionals (72 percent) think that end users in their organization would prefer to continue using passwords, as it is what they are used to.
- Passwords Are Not Going Away Completely
When it comes to identity and access management, 85 percent do not think passwords are going away completely. Yet, over nine in 10 respondents (92 percent) believe that delivering a passwordless experience for end-users is the future for their organisation. There is a clear need to find a solution that combines passwordless authentication and password management in today’s organisations.
“As many organisations transition to a long-term remote work culture, giving your employees the tools and resources to be secure online in their personal lives as well as in the home office is more important now than ever,” said Gerald Beuchelt, Chief Information Security Officer at LogMeIn. “This report shows the continued challenge that organisations face with password security and the need for a passwordless authentication solution to enable both IT teams and employees to operate more efficiently and securely in this changing environment.”
For more information and to read the full report.
Report Methodology
The report was commissioned by LogMeIn and fielded by independent technology market research specialist Vanson Bourne. 750 IT and security professionals were interviewed in April and May 2020, ranging from CIOs and CISOs, to IT managers and analysts. The respondents were from a variety of private and public sectors, across the US, UK, France, Germany, Australia and Singapore, and were from organizations with between 250 and 3,000 employees.
