

With WHfB in place, in order to steal a user’s identity, an adversary would have to obtain that user’s laptop or phone. This approach is clearly far more secure than using passwords. Instead, they provide two authentication two factors: something they have (their device), plus either something they know (a PIN) or something they are (biometrics). But what options are available for corporate networks? Microsoft now offers Windows Hello for Business, which enables users to log in without a password. Smartphones and tablets moved away from passwords long ago today, most people sign into these devices with their face or fingerprint. In fact, the 2022 Verizon DBIR reports that credential theft was involved in nearly half of all cyberattacks, including third-party breaches, phishing attacks and basic web application attacks. For businesses, they continue to be a primary source of data breaches, both on premises and in the cloud.

For users, they are a pain to remember and manage. Passwords are everywhere - and nobody likes them.
