Is Passwordless Authentication Secure? Why Do We Still Use Passwords?

Rich or poor, everyone wants to have a good lock on their door, right? It’s a matter of security and it’s an obvious need. Passwords are the keys to our private slice of the internet’s cake, and perhaps its virtual nature means we don’t take it seriously enough.

We wouldn’t leave sensitive documents such as our proof of address on the bus, would we? However, we’re more than happy to make classic security mistakes when it comes to the security of our online data.

That's why security experts are constantly working on new, reliable and user-friendly authorisation methods that make it easier for us to keep our data safe.

So, are passwords going to be left in the dust of antiquity? Let’s find out.
Sumsub — empowering compliance and anti-fraud teams to fight money laundering, terrorist financing, and online fraud.

#Sumsub #digitalsecurity #personaldata

00:00 - Intro
00:59 - A Blast from the Past
04:27 -The Human Factor
10:51 - Single Sign On
13:42 - Two-factor Authentication
15:09 - Password-free Authentication
18:20 - Conclusion. Why Do We Still Use Passwords?

More about us:

[IKEMENOsakaman]

Some people watching will have good passwords,
Some people will have thought about this before,
Some people should have thought about this and haven't,
And hopefully will, after we talk about this, a little bit more.

[yepitsarif]

This channel has insane amounts of quality content. Everything ranging from the set, to the editing and the way you speak and explain topics is fantastic. I thought you had millions of subscribers the first time I watched your videos and I was shocked to find out that that didn't. You definitely deserve more!

[sumit]

I don't understand why the videos have such low view counts! This is literally gold of a content right here! For Free!

[IKEMENOsakaman]

It's all fine and cool until you have to use a website that either (1) forces you to use uppercase, number, symbol, runes, smoke signals, etc. OR (2) limits your password to something like 12-16 characters...

[sbcinema]

What most people don't realize is that this benefit comes with a major downside, two-factor identification makes it difficult, to stay anonymous...

[JasonBechervaise]

First, I love this channel. Second, it rather bothered me that the words 'authentication' and 'authorization' were used interchangeably.

Athentication: proves you are who you claim to be, so that you can login to your account (e.g. username, password, 2FA/MFA, security questions, etc).

Authorization: allows you to perform certain actions after you have been authenticated (e.g. account privileges for regular user vs administrative user, etc).

[TheRegelation]

Good times breed weak passwords.
Weak passwords breed bad times.
Bad times make strong passwords.
Strong passwords create good times

[Querxes]

This channel is by far one of the best upcoming channels I've seen in a long time, hooked with every video!

[KenMiller]

An informative video. Although I would have liked to have seen more attention given to password management systems.

[qq]

Use a password manager, and make/have backups for it!
16:04 Another big advantage is that passwords work cross platform without any problems. Try to use a USB-based FIDO hardware key (like the ones you showed) on a smartphone...
18:20 Changing passwords regularly is a bad idea and even decreases the security.
19:40 ...because "conspiracy theories" are true. Or are the Snowden leaks, that are exactly about that topic, also "just a conspiracy theory"?

[Bradmagus]

I love how much history is packed in these videos

[zippyit]

Do you have a different set for every video or are they a 3d rendering?

[KeatingMark]

Quality content as always, Making boring topics interesting and entertaining!

[_GhostMiner]

*The last time I've seen a security question when creating or logging into an account was probably around 10 years ago.* 😅
I guess everyone realised how pointless and insecure they're.

[invincibleth]

Keep it up guys. I remember that password strength to pass crack chart on reddit. 12 character password is the new minimum as processing power goes up it's harder for us to remember.

By the way any thoughts on making a reddit sub?

[whtiequillBj]

Why don't we move to Secure Certificates?
Where your system puts a certificate on your system. This was used by a certificate authority called AStart. They aren't around anymore.
You logged in once and then they would put a certificate on your system which was then used to log you in when you came to their site.
Do certificate authorities have a problem with this? If this was used then a hacker would need to get onto your hardware your very device that you are using to log into any of your sites.

[jeremysanchez]

I'm 88.3% percent sure the set is 3d, but it looks really good regardless of it being real or not

[writerinrwanda]

Please can you cover the issue of the Google log-in loop that locks people out of their Google/YouTube channels for *life* if they forget their password and lose their phone. No e-mail reset offered. Quite a few people have mentioned this online already. It's a growing problem and it seems inconceivable that Google can't find any way to solve this and reunite divorced accounts with their owners - or at least let people delete accounts and personal data even if they won't let them continue using the accounts. At this rate, Google is going to become a graveyard of lost accounts.

[alexeiutgoff]

I just use my username as my password for everything. So I don't forget them. Secretly added an ! At the end though so it's harder to guess.

4:00 Shout-out to that one guy who commented saying he had some hash function super computer lmao

[SamiTheAnxiousBean]

pretty Interasting video
great work and research as always