Consumer Attitudes Toward Strong Authentication & LoginWithFIDO.com
•Descargar como PPTX, PDF•
1 recomendación•3,094 vistas
The FIDO Alliance has launched a new microsite, LoginWithFIDO.com, for high level, non-technical information about FIDO for consumers and service providers. As part of this project, we wanted to learn more about consumer attitudes and habits around authentication. What are their password habits? What do they think about the FIDO approach? Do they want to see FIDO at login? To find out, we conducted a survey of 1,000 U.S. consumers – the results of which were shared on this webinar. These slides include the findings from our research and how you may be able to utilize the data for your own FIDO offerings and/or deployments. This webinar includes: --How many different passwords consumers really use for their online accounts --What tactics they use for password management and how often they are resetting passwords and --Their familiarity with various types of authentication technologies including SMS OTPs, biometrics and others --The types of apps and services where consumers most want to use FIDO --How consumers want to be communicated with about FIDO at enrollment and login We also gave the audience a detailed look at LoginWithFIDO.com and how you can consider using it for your own educational initiatives around FIDO. You’ll learn: --How to navigate through the microsite and its two landing pages --How you can reference the site and its materials for your own offerings and deployments --Added insights into how to utilize FIDO’s consumer-facing marks
Recomendados
Recomendados
Más contenido relacionado
La actualidad más candente
La actualidad más candente (20)
Similar a Consumer Attitudes Toward Strong Authentication & LoginWithFIDO.com
Similar a Consumer Attitudes Toward Strong Authentication & LoginWithFIDO.com (20)
Más de FIDO Alliance
Más de FIDO Alliance (20)
Último
Último (20)
Consumer Attitudes Toward Strong Authentication & LoginWithFIDO.com
- 1. © FIDO Alliance 20201 Webinar: Consumer Research & LoginWithFIDO.com
- 2. © FIDO Alliance 20202
- 3. © FIDO Alliance 20203 Today’s Speakers Andrew Shikiar Executive Director & CMO FIDO Alliance Megan Shamas Director of Marketing FIDO Alliance
- 4. © FIDO Alliance 20204
- 5. © FIDO Alliance 20205 Latest FIDO Updates
- 6. © FIDO Alliance 20206 Security Usability Poor Easy WeakStrong = Single Gesture Possession-based Authentication Open standards for simpler, stronger authentication using asymmetric public key cryptography
- 7. © FIDO Alliance 20207 Since May 2018 Broader matrix of support across platforms and transports Hello Over 2.5 Billion Devices can support FIDO Authentication
- 8. © FIDO Alliance 20208 FIDO2 Platform/Browser Support Updated 6/29/2020 Implemented / Stable In Development Not Supported / No ETA
- 9. © FIDO Alliance 20209 Mobile First Security Keys Platform Authenticators
- 10. © FIDO Alliance 202010 So what do consumers think?
- 11. © FIDO Alliance 202011 OBJECTIVE: Gain actionable insight on consumer opinions around authentication and FIDO The survey of 1000 U.S. consumers: • Assesses consumer usage, attitudes, and preferences with log-in experiences on mobile applications and online websites • Including passwords, SMS OTPs, FIDO Authentication and its authentication options: biometrics, security keys • Provides detailed feedback on FIDO Alliance branding including FIDO logo and i-mark, including if and where it should be placed on digital assets and login screens
- 12. © FIDO Alliance 202012 Were we right? Let’s see what we found… 1 2 3 4
- 13. © FIDO Alliance 202013 abc1234 52% 5% ONLY
- 14. © FIDO Alliance 202014 Top 3 answers 37% 32%45% ******
- 15. © FIDO Alliance 202015 76% 51%
- 16. © FIDO Alliance 202016 Base: Total (n=1,032) Q26. Do you have a strategy for assigning different types of passwords to different types of web sites and apps? “I use somewhat the same password just changing uppercase lower case numbers and symbols.” “No, older accounts like social medias have older, easier passwords while newer financial and email accounts have longer and more difficult passwords.” “Typically use one that is familiar to me for some reason. DOB for family member, motivational word with year, some combination word with meaning solely to me and numbers & characters.” “Yes, I have a rotation of base words and change numbers and special characters/capitalized letters on a schematic basis.” “I usually assign one password to my accounts unless the website requires something more secure and then I use a slight variation of my usual password. If the website is one I don't use often and requires a really strange password, I request a new password every time I want to login.”
- 17. © FIDO Alliance 202017
- 18. © FIDO Alliance 202018 Interest in Using These Ways to Securely Access Mobile Apps/ Websites Base: Total (n=1,032) Q22. How interested would you be to use each of the following ways to securely access websites or apps that have your sensitive information? 69% 58% 60% 56% 52% 50% 53% 49%
- 19. © FIDO Alliance 202019 Consumers prefer to use methods stronger than username/password for: 81% 78% 67% 64%
- 20. © FIDO Alliance 202020 76%
- 21. © FIDO Alliance 202021 Importance of Benefits 92% 90% 89% 86% 84% Reduces use of passwords 83% 73%
- 22. © FIDO Alliance 202022 83%
- 23. © FIDO Alliance 202023 71%
- 24. © FIDO Alliance 202024 77%
- 25. © FIDO Alliance 202025
- 26. © FIDO Alliance 202026 50-55% 39-48%
- 27. © FIDO Alliance 202027 72% 80%
- 28. © FIDO Alliance 202028 Base: Total (n=1,032) Q13. How much do you agree or disagree with each of the following statements about the company using the logos below? | Q14. What impact, if any, would seeing one of these logos have on your willingness to purchase from each of the following? Agreement Statements About Company Using the FIDO Logos Impact of FIDO Logos on Willingness to Purchase from… ■ Strongly agree ■ Somewhat agree ■ Much more likely ■ Somewhat more 70% 70% Mobile retailers Online retailers 75% Is up-to-date on current industry security standards 77% Is an innovative company 73% Does everything it can to protect customer data 67% It is a company that cares about me as a customer 69% Is a trustworthy company 69% Improves my overall impression of the company Is at the forefront of anticipating and addressing customer needs 69%
- 29. © FIDO Alliance 202029 They said it’s very important to see FIDO logo for these apps: I-Mark/ FIDO Alliance/ FIDO Alliance – Certified Online banking and personal finance Person-to-person payments (e.g. PayPal, Venmo, etc.) Online retailing / e-commerce Travel websites (airlines, hotels, etc.) Online cloud service (e.g. DropBox, OneDrive, Google Drive, iCloud, etc.) Email services (e.g. Gmail.com, Yahoomail.com, etc.) Log on to social media accounts (like Instagram, Facebook, Twitter, etc.) Car share services (e.g. Uber, Lyft, etc.) Online food delivery services (e.g. Domino’s, GrubHub, DoorDash, etc.) Search engines (e.g. Google, Yahoo, Bing, etc.) Online video/ music streaming apps (e.g. Netflix, Spotify, Hulu, etc.) 75% 73% 71% 59% 59% 57% 54% 50% 50% 44% 43% 18% 21% 22% 31% 32% 32% 35% 37% 38% 39% 43% 7% 6% 6% 9% 9% 11% 11% 13% 12% 17% 13% ■ Yes, very important to see logo here ■ Maybe ■ No – not important to see logo here
- 30. © FIDO Alliance 202030 What We’ve Learned
- 31. © FIDO Alliance 202031 New education site LoginWithFIDO.com
- 32. © FIDO Alliance 202032 5/4/2020 Login with FIDO -SayGoodbye to Passwordso IT'SFAST, RELIABLE& SECURE FIDO GivesYoua “Fast Identity Online” FIDO iswhat’scalled a“standard.” LikeWiFi,or Bluetooth.It worksonany web browser and on all of your devices,includingour smartphone,desktopor laptopcomputer,tablet,or smartwatch. FIDO makeslogginginto your onlineaccountsmuch easier,whilekeepingyour info safefrom Login HasNever Been Easier-Or Safer! Rememberingadifferent password for all of your web accountsisapain! And if you use the same one all the time,cybercriminalsmay be able to take over your account.FIDO isnew technology that letsyou sign in to any website securely ...without relyingon a password! Seehow it works LoginWithFIDO.com
- 33. © FIDO Alliance 202033 • Terminology/Descriptions of tech and benefits IT'SFAST, RELIABLE& SECURE FIDO GivesYoua “Fast Identity Online” FIDO iswhat’scalled a“standard.” LikeWiFi,or Bluetooth.It worksonany web browser and on all of your devices,includingour smartphone,desktopor laptopcomputer,tablet,or smartwatch. FIDO makeslogginginto your onlineaccountsmuch easier,whilekeepingyour info safefrom hackersand trackers. 3 EASY STEPS How FIDO Works Onceawebsitehasturned on FIDO, you'll beabletologin with threeeasy steps
- 34. © FIDO Alliance 202034 • Terminology/Descriptions of tech and benefits • True-to-life user experience gifs
- 35. © FIDO Alliance 202035 • Terminology/Descriptions of tech and benefits • True-to-life user experience gifs • Consumer video https://loginwithfid. com 3/5 LEARN MORE Want ToLearnMore? Watch TheVideo. LEARN MORE Where You CanUse FIDO Support for FIDO iswidespread and growingfast! Wonderingwhether your deviceor serviceusesFIDO?Look for thesesymbols.Whenindoubt,tell your serviceproviders youwant FIDO! Watch Video
- 36. © FIDO Alliance 202036 • Terminology/Descriptions of tech and benefits • True-to-life user experience gifs • Consumer video • New! Service Provider video • Simple FAQ
- 37. © FIDO Alliance 202037 Internal education: Point your decision makers to loginwithfido.com/providers External education: Link to loginwithfido.com on your login or information pages or Use the language on your website
- 38. © FIDO Alliance 202038
- 39. © FIDO Alliance 202039 *Note: Usage guide available Powered by FIDO 5/4/2020 Login with FIDO -SayGoodbye to Passwords https://loginwithfid o . com 1/5 IT'SFAST, RELIABLE& SECURE FIDO GivesYoua “Fast Identity Online” FIDO iswhat’scalled a“standard.” LikeWiFi,or Bluetooth.It worksonany web browser and on all of your devices,includingour smartphone,desktopor laptopcomputer,tablet,or smartwatch. FIDO makeslogginginto your onlineaccountsmuch easier,whilekeepingyour info safefrom hackersand trackers. 3 EASY STEPS How FIDO Works Onceawebsitehasturned on FIDO, you'll beabletologin with threeeasy steps Login HasNever Been Easier-Or Safer! Rememberingadifferent password for all of your web accountsisapain! And if you use the same one all the time,cybercriminalsmay be able to take over your account.FIDO isnew technology that letsyou sign in to any website securely ...without relyingon a password! Seehow it works Login powered by FIDO. Learn more about FIDO technology at loginwithfido.com LoginLogin
- 40. © FIDO Alliance 202040 Questions? Andrew Shikiar Executive Director & CMO FIDO Alliance Megan Shamas Director of Marketing FIDO Alliance
- 41. © FIDO Alliance ©2020 If we didn’t have time to answer your question, please reach out to us at help@fidoalliance.org The webinar recording and slides will be emailed to you and posted on fidoalliance.org Please stay on to take the survey at the conclusion of the webinar 41
- 42. © FIDO Alliance 2020 fidoalliance.org 42
Notas del editor
- Hi everyone and welcome to the webinar. It’s Megan Shamas, marketing director for the FIDO Alliance. We’re looking forward to today’s webinar, where I and Andrew Shikiar will be sharing some research that we did recently and talking through our new consumer-oriented website loginwithfido.com.
- Before we get started, a few housekeeping notes….
- Let me introduce today’s speakers… me, and Andrew Shikiar who is the FIDO Alliance executive director and chief marketing officer
- Here’s what we’ll cover today… Andrew will talk through some FIDO updates, which will help uncover why we’re introducing consumer-level assets, then I’ll cover the research findings, give an overview on the new website. Then we’ll have time for some Q&A
- We know that passwords have very weak security and poor usability – but the thing that doesn’t (or didn’t“) get enough attention was the risk associated with OTPs. Not only do OTPs present major usability challenges (what’s worse than one password? Two passwords) but OTPs are also centrally stored secrets, just for a shorter timeframe. As such, they are succeceptible to large-scale attacks and/or spear-phishing – as we’ve seen in some very well-documented breaches. This really is the crux of what FIDO is trying to do – it’s eliminating use of all shared secrets, not just passwords. FIDO’s goal from day one was to transform the market away from dependence on centrally stored shared secrets to a model that uses public key cryptography and allows consumers to authenticate through devices that they literally have in their fingertips every day. It’s simpler and stronger authentication. FIDO rapidly realized this goal with the initial release of FIDO’s UAF and U2F specifications in 2015.
- -2019 was Significant year in terms of fido2 adoption -Platform authenticators are certified -Brings reach of fido2 to billions of users using these platforms -Browser support grown in breadth and depth -Ex: Stronger initial and growing support in safari for fido2 -Safari13 supports security keys on macOS, iOS and iPadOS
- -Significant year in terms of fido2 adoption -Platform authenticators are certified -Brings reach of fido2 to billions of users using these platforms -Browser support grown in breadth and depth -Ex: Stronger initial and growing support in safari for fido2 -Safari13 will support security keys on macoS - You can deploy across any mainstream OS today
- Based on your requirements, there are various approaches you can take. Many organizations, especially in the B2C/B2B model, start with a Mobile First Strategy. It helps you drive mobile application usage through more convenient authentication, while vastly improving the security. For enterprise models, security keys often an appropriate first step for improving authentication security. For frequent authentication on a device, it’s most convenient to use the available authenticators on the primary device (eg. Windows Hello, fingerprint sensor, etc).
- Knowing that support for FIDO is wide and growing fast, many service providers have been coming to us to ask about basic terminology around FIDO, and graphics for login screens. We know that introducing any new technology requires consistent communication and education across all of the services that offer it. So we took a step back and talked, through our research company, with some consumers to get their feedback on their authentication preferences, and FIDO.
- 6% said they use just 1 password for everything Another 24% said they use 6-10 passwords, so that means 76% of everyone we talk to uses 10 or less passwords. So if know the average number of online accounts per person is around 90, obviously getting some password reuse there.
- 24% said password manager
- As I said earlier, service providers have been looking for more assets to help them educate their internal constituents and external customer bases. With the learnings from our research and understanding what consumers want to see, we focused on how we could help drive adoption and consistent and accurate education – loginwithfido is the core site that houses these outputs
- Need something more simplified for service providers to educate internally and externally – fidoalliance.org is great but overwhelming to those that are totally uninitiated.
- ANDREW