You're listening to the CyberWire X, a series of specials where we highlight important security topics

affecting organizations worldwide.

I'm Dave Bitner.

Today's episode is titled Street Cred, increasing trust in passwordless authentication.

Good security gets out of the way of users while getting in the way of adversaries.

Passwords fail on both accounts.

Users feel the pain of adhering to complex password policies.

Adversaries simply copy, break, or brute force their way in. Why then have we spent decades with passwords as the primary factor for authentication?

From the very first theft of clear text passwords to the very latest bypass of a second factor, time and again improvements

and defenses are met with improved attacks. The industry needs to trust

passwordless authentication. What holds us back from getting rid of passwords?

Trust. In this episode we'll discuss a framework of technical controls to

ensure only trusted sessions authenticate, regardless of faults or failures in any one factor,

and will share a path forward for increasing trust in passwordless authentication.

A program note, each CyberWire X special features two segments.

In the first part of the show, we'll hear from industry experts on the topic at hand,

and in the second part we'll hear from our show sponsor for

their point of view. And speaking of sponsors here's a word from our sponsor

Duo Security. While remote work has been on the rise for years now.

The recent rapid expansion of work from home culture presents new security challenges.

Duo's cloud-based access security shields any and every application from compromised credentials and

devices and its comprehensive coverage helps you meet compliance requirements

...