How passwords are costly
- 1. HowPasswordsare costly SWIPE TO LEARN Just because you don’t have to pay anything extra to buy this common form of authentication, it doesn’t mean that passwords are free. Far from it, quite often passwords end up costing enterprises much more than what they have bargained for. www.mojoauth.com
- 2. SWIPE TO LEARN www.mojoauth.com Passwords have become an integral part of our lives, with the average user having around 100 passwords to manage. A password breach can jeopardize personal and financial information, making it overwhelming and risky. Reusing passwords across multiple accounts can further escalate the security risks.
- 3. SWIPE TO LEARN Once the password database is compromised, all passwords become useless, and a single breach can compromise security credentials and private resources. www.mojoauth.com Organizations have to ensure password security as a lot is at stake if an attacker gets access to the password database.
- 4. SWIPE TO LEARN www.mojoauth.com What is the problem with passwords? Password attacks are evolving and are responsible for 81% of breaches, with insider threats costing upwards of $600,000 per incident. Organizations relying on third-party services are at higher risk of breaches and may be left unaware of their vulnerability. Password issues and resets are a significant cause of support calls, costing a 10,000- employee organization an average of $100,000/year.
- 5. SWIPE TO LEARN www.mojoauth.com What is the problem with passwords? Password attacks are evolving and are responsible for 81% of breaches, with insider threats costing upwards of $600,000 per incident. Organizations relying on third-party services are at higher risk of breaches and may be left unaware of their vulnerability. Password issues and resets are a significant cause of support calls, costing a 10,000- employee organization an average of $100,000/year.
- 6. SWIPE TO LEARN What are typical attacks against passwords? www.mojoauth.com Attacks on passwords vary in cost and complexity. Some of the most popular episodes are:
- 7. SWIPE TO LEARN Brute force attacks www.mojoauth.com An encrypted blob is obtained containing credentials of interest (such as the SAM database). It can then use a computer rig to crack through the database until the passwords are revealed.
- 8. SWIPE TO LEARN Credential stuffing www.mojoauth.com A database of compromised credentials is loaded and tested against the system hoping that one or more credentials in the database match a legitimate user.
- 9. SWIPE TO LEARN Shoulder surfing www.mojoauth.com Personal information or confidential information is stolen by peering over the target’s shoulders. By its nature, it’s often used by insider threat actors.
- 10. SWIPE TO LEARN Password spraying: www.mojoauth.com A list of commonly used passwords is replayed, hoping that one of them is being used by a legitimate user. It is estimated that 16% of password attacks are performed using password spraying.
- 11. SWIPE TO LEARN Phishing: Phishing attacks, where an attacker impersonates a trusted source or creates a sense of urgency, are responsible for the majority of password breaches. Attackers use links to exploit kits or malware-infected documents to exfiltrate credentials from unsuspecting users.. www.mojoauth.com
- 12. SWIPE TO LEARN What is the Solution? To avoid password leaks, passwordless authentication verifies the user based on a possession or inherent factor, removing the need to memorize multiple passwords. This can be done with options like magic links, email OTP, webAuthn, and phone login. www.mojoauth.com MojoAuth offers a reliable, secure, and convenient passwordless authentication feature.