Kiss Passwords Goodbye: Cisco Secure Unveils Passwordless Future with Stronger Security for All

Rhea-AI Summary

Cisco has announced the launch of Duo passwordless authentication, which allows users to securely log into cloud applications without needing passwords. This feature, part of Cisco's zero trust platform, enhances security by using security keys or biometrics. Available for public preview in summer 2021 and general availability by year-end, this innovation aims to eliminate the risks associated with password management, reducing IT support costs and boosting productivity. The solution integrates with existing authentication systems, thus facilitating a smoother transition for enterprises.

Positive

• Duo passwordless authentication allows users to log in without passwords, enhancing security and user experience.
• The integration with existing systems enables broad compatibility with cloud and on-premises applications.
• The move can significantly reduce IT support costs related to password resets and management.

Negative

• None.

SAN JOSE, Calif., March 30, 2021 /PRNewswire/ -- Cisco Live Digital 2021 --

News Summary: 

• Cisco introduces infrastructure agnostic, passwordless authentication by Duo, enabling users to skip the password and securely log into cloud applications via security keys or platform biometrics
• Duo passwordless authentication is part of Cisco's industry-leading zero trust platform, layering device and behavior monitoring controls to further strengthen login security
• Available for public preview this summer with general availability by year's end

Cisco Secure, the leader in enterprise security, today unveiled the future of simple and effective security with infrastructure agnostic, passwordless authentication by Duo. Integrated seamlessly into the existing Duo authentication experience used by more than 25,000 organizations globally, Duo passwordless authentication will enable enterprise users to skip the password and securely log into cloud applications via security keys or biometrics built into modern laptops and smartphones.     

The consequences of using passwords are well known. Passwords are easily compromised and difficult to manage, costing enterprises billions of dollars annually. Users are inundated with passwords in their personal and professional lives. Password reset requests comprise a lion's share of IT help desk tickets, resulting in lost productivity for users and increased support costs for the business. 

Duo passwordless authentication is part of Cisco's industry-leading zero trust platform, securing access for any user, from any device, to any IT application or environment. The product is designed to be infrastructure agnostic, paving the way to a passwordless future while ensuring that enterprises can seamlessly protect any combination of cloud and on-premises applications without requiring multiple authentication products or leaving critical security gaps.

"Cisco has strived to develop passwordless authentication that meets the needs of a diverse and evolving workforce and allows the broadest set of enterprises to securely progress towards a passwordless future, regardless of their IT stack," said Gee Rittenhouse, SVP and GM of Cisco's Security Business Group. "It's not an overstatement to say that passwordless authentication will have the most meaningful global impact on how users access data by making the easiest path the most secure."

Duo passwordless authentication will:

• Simplify and strengthen authentication for accessing cloud applications protected by Duo single sign-on (SSO) and third-party SSO and identity providers, by leveraging security keys and platform biometrics such as Apple FaceID and TouchID, and Windows Hello. Pairing passwordless authentication with Duo SSO enables organizations to consolidate hundreds of passwords and authentications into one easy login for users to cloud applications.
• Provide one security tool for all authentication scenarios thanks to Duo's compatibility with hundreds of applications and identity providers, with no infrastructure change required.
• Reduce risk of password-related threats and vulnerabilities such as phishing, stolen or weak passwords, password reuse, brute-force, man-in-the-middle attacks and password database compromise.
• Add layers of security to the authentication with device health and behavior monitoring controls via Duo's secure access product suite, further reducing risk in the event a biometric is stolen or not effective.
• Reduce administrative burden of password-related help desk tickets and password resets.

"Cisco is well-positioned to accelerate the adoption of passwordless authentication as enterprises seek to alleviate the password-related headaches that for years have plagued their users and IT teams," said Jay Bretzmann, Program Director for Identity & Digital Trust and Cloud Security, IDC. "While the transition will be a process for organizations due to legacy infrastructure, passwordless authentication is a key stepping stone to enabling a zero-trust security architecture and a feature that organizations must begin looking into."   

Workforces are ripe for the adoption of passwordless authentication. According to the 2020 Duo Trusted Access Report, 80 percent of mobile devices used for work have biometrics configured, up 12 percent the past five years.

Duo passwordless authentication leverages the Web Authentication (WebAuthn) standard, based in asymmetric cryptography, enabling biometrics to be securely stored on and validated by the device, locally, as opposed to a centralized database. Duo helped drive WebAuthn's ratification as an official web standard and adoption across platforms as a member of the World Wide Web Consortium (W3C) working group.

"Passwordless is a journey requiring incremental changes in users and IT environments alike, not something enterprises can enable overnight," said Wolfgang Goerlich, Advisory Chief Information Security Officer, Duo Security at Cisco. "Duo can help enterprises transition their environments and workforces securely and minimize user friction while simultaneously increasing trust in every authentication."

Duo's security practices are built on ISO 27001, NIST's Cyber Security Framework, and AICPA's Trust Service Principles and are designed to meet GDPR and other privacy laws around the world. Duo is committed to the highest level of security for its customers - both public and private, and currently holds SOC2 Type II, ISO27001:2013, ISO27017:2015, and ISO27018:2019 certifications, as well as being FedRAMP authorized.

Duo passwordless authentication will be available for public preview beginning summer 2021.

Additional resources:

• Sign up for product updates: duo.sc/pwless-info
• Blog: Passwordless Authentication is Coming
• Learn more: WebAuthn.guide

About Cisco

Cisco (NASDAQ: CSCO) is the worldwide leader in technology that powers the Internet. Cisco inspires new possibilities by reimagining your applications, securing your enterprise, transforming your infrastructure, and empowering your teams for a global and inclusive future. Discover more on Network and follow us on Twitter at @Cisco.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at www.cisco.com/go/trademarks.  

View original content to download multimedia:http://www.prnewswire.com/news-releases/kiss-passwords-goodbye-cisco-secure-unveils-passwordless-future-with-stronger-security-for-all-301258741.html

SOURCE Cisco Systems, Inc.

FAQ

What is Duo passwordless authentication by Cisco?

Duo passwordless authentication is a feature that allows users to log into cloud applications without using passwords, enhancing security through biometrics or security keys.

When will Cisco's passwordless authentication be available?

The passwordless authentication feature will be available for public preview in summer 2021, with general availability expected by the end of the year.

How does Cisco's passwordless authentication improve security?

It reduces the risks associated with password management, such as phishing and password reuse, by utilizing secure biometric or hardware-based logins.

What is the significance of Cisco's zero trust platform in relation to Duo authentication?

Cisco's zero trust platform provides enhanced security measures that ensure secure access for users across diverse IT environments.

How many organizations currently use Cisco's Duo authentication system?

Duo authentication is currently used by more than 25,000 organizations globally.