Tag
All topics →The move beyond passwords: passkeys, magic links, biometrics, and how passwordless authentication actually gets adopted.
42 stories, newest first.
Latest
A decision framework for enterprise passkeys: when device-bound hardware keys beat synced passkeys, mapped to user risk, device context, compliance, and total cost. Includes the three failure patterns that surface only after rollout.
Read the article
Passkeys demo better than any login method ever shipped. Most deployments still cannot get anyone to turn them on. Both numbers are true.
Passkeys, post-quantum crypto, silent network authentication, AI behavioral biometrics, and decentralized identity are fusing into one login stack. Here is what it looks like by 2030, and the two moves in 2026 that decide whether you are ready.
24 billion stolen credentials in one database. 8.3TB of plaintext passwords and login URLs harvested by infostealers. The credential economy has scaled.
Scaling a CIAM platform past a billion users taught me that customer identity is a trust problem: progressive profiling, risk-based auth, and passwordless done right.
I spent ten years engineering, scaling, and defending password-based authentication for a CIAM platform that grew to a billion users.
Every headline put the 19 billion figure in 60-point type. Almost none of them mentioned that the unique entry rate is in the single digits.
We cancelled Auth0 over a year ago. Not because it stopped working, but because scaling to 350,000 monthly active users made the pricing model untenable.
The CIAM platform that got you to 1 million users won't get you to 10 million AI agents.
Silent Network Authentication verifies users in 1-4 seconds using SIM cryptography without any user action.
Passwords are responsible for 80% of data breaches. Passwordless authentication eliminates the attack surface entirely.
March 2026 marks passwordless tipping point: Microsoft forces passkey migration, regulatory deadlines hit, and adoption surges to 69% of consumers.
Not all passwordless solutions are built the same. Some excel at enterprise compliance; others at developer speed or consumer UX.
87% of enterprises are deploying passkeys. This complete playbook covers architecture decisions, enrollment UX, recovery design, and the deployment
1Password for polish, Bitwarden for free and open source, Keeper for compliance. Ten password managers compared on verified 2026 pricing, audits and passkeys.
Production authentication patterns for OAuth 2.0, OIDC, JWT, SAML, and WebAuthn, including the build-versus-buy maths and the storage and session decisions that are expensive to reverse later.
Comprehensive guide comparing password hashing algorithms - Argon2, Bcrypt, Scrypt, and PBKDF2.
Twilio acquiring Stytch signals a major shift in developer CIAM. I've analyzed 20+ platforms, from Descope to Keyclock, to show you which deliver on
Static API keys scattered across repositories create exponential security debt as AI scales. The solution? Credentials that live for minutes, not months.
Ten passwordless CIAM platforms compared on verified September 2026 pricing and real passkey depth, plus three vendors to drop from an older shortlist.
The definitive 2026 CIAM ranking: ten platforms compared on pricing, enterprise fit, and agent identity, plus the right pick for each job.
🚀 Developers: Boost user signups by 90% with Google One Tap Login! This complete 2025 guide covers implementation, security considerations, and 5
Security researchers discovered 16 billion stolen passwords from Apple, Google, Facebook and more.
Most enterprises unknowingly pay a $700K+ annual 'password tax' through hidden costs like help desk tickets, productivity loss, and security risks.
Uncover the mechanics of password hashing and salting, and how these techniques are pivotal in defending against cyber threats.
Discover the essentials of FIDO2 authentication implementation in this developer-focused guide.
AI password generators are a transitional tool, not a destination. Here is what they genuinely add over a standard random generator, and where the honest answer is to move to passkeys instead.
Generate strong passwords from your browser cryptographic randomness, with a live entropy and strength read. No signup, nothing leaves your device.
Passwordless projects fail on enrolment and recovery, not cryptography. A phased checklist from baseline to deprecation, with the metrics that matter.
Synced passkeys for most users, device-bound FIDO2 keys for admins, push as a bridge. The full comparison on security, cost, assurance level and rollout.
Explore the technical realities of passwordless authentication in this comprehensive analysis.
Tired of passwords? AI is ushering in a new era of authentication! This post delves into cutting-edge technologies like behavioral biometrics, risk-based
Apple's latest Passwords app is poised to transform the way we manage and protect our digital identities.
Say goodbye to passwords! Passkeys are the next generation of authentication, offering enhanced security and convenience.
Discover the security challenges of magic link authentication and how to mitigate them
Authentication: The digital gatekeeper. Explore the hidden infrastructure and cutting-edge security keeping your data safe online.
Learn how verifiable credentials using tamper-proof cryptographic signatures are transforming digital identity - enabling convenient access controls,
This essential CSO guide outlines the robust account monitoring, access notifications, multi-factor authentication, deception technology, and user
Discover the future of secure and innovative authentication with WebAuthn. Say goodbye to passwords and hello to passwordless auth and passkeys.
Passwords are insecure and allow cybercriminals to attack businesses and their users. However, replacing passwords widely with better authentication
Passwordless authentication is becoming more popular among businesses prioritizing their users' and employees' security and digital experience. Here's why.
The future of passwords is looking brighter than ever. With the rise of cyber-attacks and data breaches, it's becoming more important to use strong
