Australian businesses are actively moving to eradicate passwords from employees’ lives, with 90 percent of IT leaders expecting passwords to represent less than a quarter of their organisation’s logins in five years or less.

This is the verdict from the FIDO Alliance and LastPass 2023 Workforce Authentication Report, released today, which gauges IT decision-makers’ attitudes and plans for removing passwords in favour of easier and more secure passwordless authentication.

“The move towards passwordless authentication among Australian organisations has gathered significant momentum over the past few years as an increasing number of organisations have moved to eliminate the risk and liability of passwords, as they are the source of the vast majority of data breaches,” said Andrew Shikiar, Executive Director of the FIDO Alliance. “Today’s report validates this trend by showing that Australian IT leaders are in step with their global counterparts—and in some instances, ahead of the global average—in rapidly looking to minimise their reliance on legacy authentication methods in favour of passkeys that provide user-friendly, phishing-resistant sign-ins.”

The 2023 Workforce Authentication Report also found that:

• Australian businesses are ready to embrace a passwordless future, with 94 percent planning to move, or have already moved, to passwordless technology (ahead of the global average of 92 percent) within the next two years and 41 percent planning to do so within the next six months. Meanwhile, 19 percent have already adopted a passwordless experience at their organisation.
• Businesses believe passkeys will help make them more secure: 94 percent of Australian businesses believe passkeys will benefit their overall security posture (above the global average of 92 percent), and 92 percent agree that passkeys will eventually help reduce the volume of unofficial (i.e., ‘Shadow IT’) applications.
• However, many Australian businesses recognise that work still needs to be done. A majority of Australian businesses surveyed are still using phishable authentication methods [1], such as a one-time passcode (OTP) sent to a handset or tablet (41 percent), manually entering a password (27 percent), and/or using multi-factor authentication (MFA, 36 percent) when it comes to authenticating users within their organisation.
• The majority recognise that this transition will take time and education: 51 percent of Australian IT leaders surveyed feel they need more education on how passwordless technology works and/or how to deploy it, and 25 percent cited concerns that users may be resistant to change or using a new technology.
• When making this transition, Australian businesses made it clear they wanted to choose where they stored passkeys, with 69 percent of local IT leaders anticipating storing them in a third-party password manager.

“These survey results demonstrate that businesses are excited about the prospect of a passwordless future and all the benefits that future will bring. And the clear majority also recognise that a password manager plays an important role in that future,” said Mike Kosak, Senior Principal Intelligence Analyst at LastPass. “While the adoption of passwordless authentication will take some time and coaching, LastPass is proud to support forward-thinking leaders like these on that journey—ushering their organisations towards security that is stronger and more effortless than ever.”

Research for the 2023 Workforce Authentication Report was conducted by Sapio Research through an online survey of 1,005 IT decision-makers in Australia, the United States, Germany, the United Kingdom, and France. Of those surveyed, 200 respondents were from Australia.

Justin Lance Marcel Lavadia

+ posts

Justin Lavadia is a content producer and editor at Public Spectrum with a diverse writing background spanning various niches and formats. With a wealth of experience, he brings clarity and concise communication to digital content. His expertise lies in crafting engaging content and delivering impactful narratives that resonate with readers.

• AI laws to strengthen public data security
• Laws to enhance digital data security resilience
• Enhancing public services through data management
• Safeguarding data privacy in national infrastructure