28 Feb

3 Min read

Nok Nok Shares The Passwordless Journey: Here’s What You Need To Know

February 28, 2022 Nok Nok News 0 comments

Passwords have been used for many years to protect data and accounts. Despite being used for security purposes, using passwords is not always the best option. That is especially true when combatting cyber security threats. In fact, passwords can be seen as a weakness.

The Passwordless Authentication Path

Various risks come with the use of passwords. For example, users can forget about them. They are also easily compromised since many reuse passwords across different systems. Passwordless authentication is seen as a better alternative.

As the name suggests, password-free authentication includes the use of alternative authentication methods instead of relying on passwords. Common methods include the use of a secondary device or account for verification and biometric authentication.

Aside from reducing cyber security risks, going passwordless can help make reduce friction so that users will have a smoother experience. On the side of an institution, it helps reduce expenses. At the same time, it can help increase sales or the number of users.

Implementing Password-Free Authentication For Cyber Security

There are different ways of applying passwordless authentication. It is also more complex than one may think. Depending on what a company chooses, it may require having dedicated development resources for a long time.

Fortunately, working with a trusted service provider can help organizations skip some steps. In fact, with the help of a service provider, organizations can easily implement passwordless authentication for their users.

What Nok Nok Has Learned

The passwordless journey does not happen overnight. That is one of the main points Nok Nok has pointed out in its presentation at Authenticate 2021. The reasons for this include existing systems and processes being deeply rooted in security practices. It also takes a lot to develop behavior change, which is something necessary to fully adopt passwordless authentication. Additionally, the passwordless journey is typically included in a larger digital transformation.

Nok Nok also shared some of its experiences in applying password-free authentication in systems from different institutions. Based on the results of these partnerships, Nok Nok is proud to share that all companies have seen success.

Among the most notable statistics include the following:

10% improvement in onboarding success
50% reduction in onboarding time
6% increase in sign in success
78% increase in sign in speed

Going password-free comes with many benefits for both the institution and end-users. However, it is important to ensure proper implementation.

If you want to learn more about safer authentication techniques for better cyber security, contact us at Nok Nok.

22 Feb

2 Min read

MFA For Cybersecurity Gets Highlighted In Federal Zero Trust Strategy

February 22, 2022 Nok Nok News 0 comments

Cybersecurity is one of the pressing issues that the United States is facing. Threats affect the government, organizations, institutions, and even individuals.

The Identity Theft Resource Center (ITRC) said there were 1,291 data breaches publicly reported in the U.S. from January to September 2021, affecting about 281 million individuals. In comparison, this total is 17% more than the recorded breaches during the same period in 2020.

Government Efforts: The Federal Zero Trust Strategy

To address this problem, the government looks for ways to improve cybersecurity. On January 26, 2022, the Federal Zero Trust Strategy was released. The Office of Management and Budget (OMB) published the strategy as Memorandum M-22-09. Moving the U.S. Government Toward Zero Trust Cybersecurity Principles.

This move aims to promote a better security approach through government-wide efforts, setting a new baseline in terms of access controls. An important point to highlight is the prioritization of using phishing-resistant multi-factor authentication (MFA). Additionally, there is also a need to consolidate identity systems for improved protection and monitoring.

Understanding the Strategy

At the core of the strategy are two main focuses — the vision and actions on identity.

Generally, staff members of government agencies have to use enterprise-managed identities to get access to applications used for work. Phishing-resistant multi-factor authentication must be in place to protect said personnel against more sophisticated cyberattacks.

Three actions must be taken.

First, the agencies should have centralized management systems for users.

Second, they should use strong MFA throughout the organization. Specifically, all agency staff members, contractors, and partners have to use phishing-resistant MFA. Meanwhile, public users should be given this option. Furthermore, it should not be required to use special characters for passwords or have regular password rotation.

Third, agencies should consider having at least one device-level signal when giving users authority to access resources. This signal is additional security alongside identity information about the authenticated user.

The FIDO Standard

Through the announcement of the strategy, the federal government also encouraged using FIDO2 standards. Thus, further recognizing the FIDO Alliance’s efforts to promote the use of phishing-resistant multi-factor authentication and reduce people’s over-reliance on passwords.

The FIDO2 is FIDO Alliance’s newest set of specifications. It includes Web Authentication (WebAuthn) specification and Client-to-Authenticator Protocol (CTAP). Learn more about the FIDO2 Project here.

15 Feb

2 Min read

E-Commerce Channels Get Better Security

February 15, 2022 Nok Nok News 0 comments

Security is among the top priorities and concerns of consumers around the world. That is especially true as we welcome more cashless transactions. Fortunately, many organizations have realized the importance of cyber security. For instance, EMVCo partnered with FIDO Alliance and W3C for fraud prevention.

Secure Transactions With Cyber Security

EMVCo, which is the organization that manages and develops EMV Specifications and programs to enable card-based payments, continuously works to ensure secure payment transactions. Addressing the challenges that come with global interoperability, the organization introduced an enhanced EMV 3-D Secure (3DS) Specifications.

The latest version is called the EMV 3DS 2.3. It aims to improve the customer experience while strengthening the capabilities of acquirers, issuers, and merchants to fight fraud across various e-commerce channels and devices.

EMV 3DS 2.3 At A Glance

The goal of adopting EMV 3DS 2.3 is to make the overall payment experience of customers better with a streamlined authentication process. At the same time, it offers more flexibility in implementing the EMV 3DS across channels and devices. Thus, helping issuers with the identification of fraudulent transactions.

One of the most important updates of this version focuses on cyber security. In its bid to further its efforts against fraud, EMVCo worked with World Wide Web Consortium (W3C) and FIDO Alliance. The collaboration resulted in the inclusion of Web Authentication (WebAuthn) and Secure Payment Confirmation (SPC) in the EMV 3DS flow. With these, issuers or merchants can better determine if a transaction is legitimate or not.

Here are other things you can expect:

Expect easier implementation of EMV 3DS on traditional and non-traditional e-commerce payment channels and/or devices due to the Split-SDK model that has multiple variants.
The consumer authentication process is seen to be faster as the updated version supports device binding, wherein the consumers’ devices remember their authentication details.
The automated out-of-band transitions will allow consumers to seamlessly switch from a merchant application to a merchant application and vice versa.
There will be additional data — transaction and EMV Payment Token — to help the issuers better identify transactions. Said data will also help simplify authentication in the future.

You can learn more about EMV 3DS Specifications on the organization’s website. You can also stay updated on new developments in cyber security by subscribing to Nok Nok.

Latest Posts

Navigation

Please complete this form to view and download this resource.

Please complete this form to view and download this resource.

Please complete this form to view and download this resource.

Please complete this form to view and download this resource.

Please complete this form to view and download this resource.

Please complete this form to view and download this resource.

Please complete this form to view and download this resource.

Please complete this form to view and download this resource.

Please complete this form to view and download this resource.

Nok Nok Shares The Passwordless Journey: Here’s What You Need To Know

The Passwordless Authentication Path

Implementing Password-Free Authentication For Cyber Security

What Nok Nok Has Learned

MFA For Cybersecurity Gets Highlighted In Federal Zero Trust Strategy

Government Efforts: The Federal Zero Trust Strategy

Understanding the Strategy

The FIDO Standard

E-Commerce Channels Get Better Security

Secure Transactions With Cyber Security

EMV 3DS 2.3 At A Glance

Latest Posts

Navigation

Please complete this form to view and download this resource.

Submit to Download Forms

Please complete this form to view and download this resource.

Please complete this form to view and download this resource.

Please complete this form to view and download this resource.

Please complete this form to view and download this resource.

Please complete this form to view and download this resource.

Please complete this form to view and download this resource.

Please complete this form to view and download this resource.

Please complete this form to view and download this resource.