Rob Otto, EMEA Chief Technology Officer
EMEA CTO Rob Otto sees traditional username and password logins growing increasingly antiquated and risky in 2024. Motivated by sophisticated fraudsters, major IT leaders and Fortune 100 companies will be adopting passwordless solutions this year. Conversely, those companies who fail to strengthen their cybersecurity postures in response to new threats face serious risks this year. Rob’s predictions for the 2024 IAM market are as follows:
In 2024, the business landscape is poised for a wake-up call as the realization dawns that relying on traditional passwords for security exposes both employees and customers to significant risks. Industry giants like Google and Apple are steering towards passkeys, a paradigm shift that promises not only unparalleled convenience but also heightened security. As users swiftly adapt to the seamless experience of passkeys, I predict we will see a substantial reduction in password usage by as much as 25% in 2024.
While passkeys and other forms of passwordless authentication like biometrics provide more convenience, they are also more secure. For example, passwordless authentication methods use many touchpoints, from physical location to keystrokes and time of day, all confirmed by external sources to authenticate a user. This makes passwordless authentication almost impossible to overcome and, compared to hacking a passcode, infinitely more complex.
On top of this, research has found that 66% of UK consumers have dropped an account or service simply because of a clunky log-in experience. There are real stakes at play for businesses that don't adjust to changing customer demands. People increasingly expect online experiences to be frictionless. As more and more people see the ways biometrics, passkeys, and device identifiers deliver convenience, the more antiquated passwords will seem.
Network access within businesses is poised for a more gradual transformation. In the face of escalating cyber threats, reliance on easily-compromised credentials makes employees prime targets for malicious actors. Though the immediate adoption of passwordless solutions may be challenging, organizations are likely to initiate the journey by implementing additional security measures like multi-factor authentication to pave the way for a smoother transition.
Amidst the uncertainties of a volatile market, maintaining robust cybersecurity budgets becomes imperative. The lucrative nature of hacking for cybercriminals and the relentless evolution of their tactics underscore the urgency for businesses to fortify their defenses. Neglecting cybersecurity investment is the most significant mistake businesses could make as they venture into the new year.