October Newsletter: Beyond Passwords

2-factor authentication is an extra layer of security. Usually, it requires someone to enter not only a username and password, but also a piece of information that only the user knows or has access to. Now, companies such as Google, Apple, Microsoft, Facebook and Amazon either require or allow people or companies to enable 2-factor authentication.

Some of Grundig IT’s clients use 2-factor authentication for GSuite logins. When they login to any GSuite application, a text message with a 6-digit code is sent to their phone and they have to input this number before they can complete the login. For more, see this article on CNET or this one at Secure Envoy.

Single Sign-on (SSO) services enable people to login to a single web console in order to gain access to services their employers would like them to use, usually websites that require logins. Companies are employing SSO to avoid having to give passwords for individual applications to their employees. The usernames and passwords for sites are coded into the administrative console of the SSO service and never revealed to individual users. General information about SSO can be found here.

Here a couple of Single Sign-on providers that companies can consider . . .

Allows and provides Single Sign-on to easily control access to a large variety of cloud applications which require a web login. This service is geared towards CPA and accounting firms.

Avatier develops and provides identity management software. They offer several SSO options, including Active Directory SSO Authentication, Auto Detect and Enforce, which forces users to sign on through the Avatier SSO portal when they attempt to access cloud applications. Enterprise Password Synchronization synchronizes SSO passwords when directory passwords change.

Thumbprints allows people to unlock a device (generally a smartphone) using a thumbprint. Due to the uniqueness of biometric methods like fingerprints, this form of authentication is a convenient for users. This technology was introduced in smartphones as early as 2011 and later incorporated into the iPhone 5S in 2013.

Bypassing this type of security is difficult. The technology continues to improve and it’s rather hard to cut someone’s finger off without them noticing. Here and here are further articles to consider regarding thumbprint authentication.

Facial recognition enables applications or devices to identify a person by recognizing their face. While not much more secure than a fingerprint scanner, new biometric methods like facial recognition are becoming more popular. The concern: Earlier versions of facial recognition technology could be fooled by an image of the user. But, as with fingers, heads are hard to remove without someone noticing. Check out the following for more information . . .

Voice recognition analyses the way people say words. Users no longer have to remember passwords. Recently, HSBC implemented a voice recognition system. It asks the user to say a few words and compares them to the voice ID. This approach is not foolproof. A BBC reporter set up an HSBC account. He signed up for the Voice ID authentication service. The reporter’s twin brother accessed the account via telephone. He was able to imitate his brother’s voice to gain access. More can be found at . . .

Which devices offer or will offer some of these features?

As Always, Happy Computing!