Password fatigue: everyone’s had enough of trying to remember all the different passwords they need every day so they use weak passwords or the same passwords
Data breaches: if a company’s database is compromised all of the user’s information becomes vulnerable because passwords are stored on company databases alongside the user’s personal information
Insecure storage: users end up writing down their different passwords because they need so many
Frequent changes: systems that require regular password updates become frustrating for users, leading to weaker passwords or predictable choices
Password managers: most store a large amount of personal information alongside users’ passwords making them prime targets for hackers and raising security and privacy concerns
SMS, 2-Factor and Multi-Factor Authentication
Vulnerable: to SIM swapping, message interception and database breaches where the user’s number is stored for authentication purposes
Device specific: frustrating for users when they can’t access their device
Apps and tokens: MFA often requires using authenticator apps or hardware tokens making the process confusing or inconvenient for users
Device reliant: MFA often requires specific devices with compatible technology
Accessibility: Users with disabilities or in remote areas can find some MFA methods challenging to use
Frustrating: frequent prompts for MFA verification can be frustrating for users especially those who log in frequently or on multiple devices
Biometrics
Permanent data trail: biometric data is unique and cannot be changed and once compromised, remains vulnerable indefinitely
Spoofing: advanced techniques such as AI or deepfake technology can trick biometric systems into granting access
Bias and accuracy: biometric systems can incorrectly identify users and have shown racial and gender biases and problems with disability and injury
Device dependence: biometric authentication relies on specific hardware which may not be universally available or functional for all users
implementation costs: the specialised hardware and software needed can be expensive for both organisation and user
Standardisation : lack of universal standards can lead to inconsistencies and compatibility problems
Authenticator Apps
Device dependent: users need access to the specific device where the app is installed and losing access to the device can lock users out
Switching devices: can be confusing, time consuming and frustrating for users
Travel and technology: international travel and non-compatible devices can create problems
Accessibility: time based codes expire quickly which can be challenging for some users and many authenticator apps lack robust accessibility features
Frequent prompts: constant requests for authentication codes frustrate users
Vulnerable: sophisticated attackers can intercept codes with adversary in the middle attacks
Data breaches: if users’ credentials are exposed through phishing their accounts become vulnerable through synced MFA codes
Passkeys
Device dependent: if a user loses access to their device they can struggle to recover their accounts and switching devices or using multiple devices can create syncing issues
Hardware: passkeys rely on hardware security modules and legacy or incompatible devices can be excluded
Compatibility: users often face difficulties transitioning passkeys between platforms
Familiarity: it is not a seamless transition from traditional passwords to passkeys which can be confusing and unfamiliar for users
Biometrics: often rely on biometric authentication raising all the same issues
Usability: the user experience can vary significantly depending on the platform, browser or service leading to inconsistencies and user frustration
Adoption: lack of standardisation and the technical expertise and expense required to implement passkeys has made adoption difficult for many smaller organisations and websites
DigiChek Key
Privacy: DigiChek Keys do not rely on sensitive personal data, are never stored with any other identifying information or shared and cannot be used for user tracking
Reliability: as DigiChek Keys do not rely on external networks, they ensure consistent access without delays or outages, even in remote areas
Simplicity: DigiChek Keys are simple to set up, remember and use for both organisation and user and do not require specific apps, hardware or software
Accessibility: DigiChek Keys can be used by anyone regardless of device availability, digital literacy, physical characteristics or limitations
Cost: DigiChek Keys are cost effective for users and organisations as implementation does not require specialised hardware, software or infrastructure or particular technical expertise
Device independent: DigiChek Keys can be used on any device in any location without any adjustment
Account recovery: changing a DigiChek Key is a simple, instant process controlled by the user
Familiarity: as DigiChek Keys are based on the traditional password system, users of all ages are comfortable and familiar with the process
