Researchers anticipate it will increase from a value of $12.79 billion in 2021 to $53.64 billion by 2030.

With the threat of credential theft remaining high, the global passwordless authentication market continues to grow. The passwordless authentication ecosystem “Microsoft’s mobile certificate-based solution coupled with the hardware security keys is a simple, convenient FIPS-certified phishing-resistant MFA method,” Ranganathan said. This approach means there’s less chance of credential theft as a result of phishing or social engineering. The YubiKey can be plugged in via USB, where the user can pick a certificate and enter the PIN to get authenticated to access the application. On Android, users can enable Azure AD CBA support via the latest MSAL without the need for the YubiKey Authenticator app. Then users can select the YubiKey certificate from the certificate picker to sign in and enter a unique PIN via the YubiKey authenticator. IOS users can register via the Yubico Authenticator for iOS app and copy the YubiKey’s public certificate into the iOS keychain. The new Microsoft/YubiKey login solution enables users to provision certificates with a hardware security key so that users can authenticate on iOS and Android devices. How the Microsoft/YubiKey phishing-resistant authentication works But this new public preview unlocks support for BYOD,” said Vimala Ranganathan, product manager of Microsoft Entra, in the announcement blog post. On mobile, while customers can provision user certificates on their personal mobile device to be used for authentication, this is primarily feasible for managed mobile devices. cybersecurity Executive Order 14028 requires the use of phishing-resistant MFA on all device platforms. With these threats so common, decreasing reliance on password-based security is now critical for reducing exposure to these increasingly effective scams, particularly in hybrid working environments. federal agencies must adopt phishing-resistant multi-factor authentication to combat increasingly common phishing attacks.Īs recently as yesterday, Dropbox confirmed it had been hacked via a phishing scam that gave attackers access to some of the organization’s source code and customer information. It also comes after the Biden administration’s 2021 Executive Order on Improving the Nation’s Cybersecurity mandated that U.S.

Microsoft fido key