A 2015 survey conducted by TeleSign revealed that 21 percent of people use a password that is more than 10 years old. At the beginning of June, Twitter was in the news when hackers stole more than 32 million account credentials, and the most used password was “12345.” Needless to say, the password as we know it is hardly an air-tight safety measure in a world full of advanced cyber criminals.
Luckily, there are several companies working on this solving the security problem beyond a few capital letters and special characters. It may just be time to kill the password.
Clef
Clef is a two-factor authentication service that businesses can implement on their sites to give users a more secure way to visit, without requiring a long, cumbersome password. Those who want to log onto a Clef site are asked to download the Clef app to their iPhone or Android device. From here, they can verify their identity (the first authentication step) with a Touch ID or PIN. Once this has been completed, the Clef-embedded website generates a wave form on the screen (the second authentication step).
Users point their smartphone camera at the screen to capture the image within the app, and a new session begins on the website once it’s detected – no password necessary. They also have a step built in to confirm the destination URL in an effort to catch phishing attacks.
Clef can be easily installed through plugins on WordPress, Joomla, Magento, and more.
Nymi Band
This wearable device has an algorithm that uses an electrocardiogram as a biometric indicator. In short, this means that your actual heart rhythm is your password – your ECG determines whether you can log onto a site. The band also has an accelerometer and gyroscope to recognize your gestures, and it automatically logs out of your sessions once you remove it from your wrist. A Nymi Band discovery kit that includes all of the device’s software starts at $149. For the ease of use, that may be a reasonable price to kill the password for many people.
GTRIIP
GTRIIP leverages biometrics (Touch ID as well as Nexus Imprint technology) to simplify and secure travel and location check-ins. The Android and iOS app asks users to create a GTRIIP profile, including information such as their passport ID, fingerprints, date of birth and country of origin. From here, they can book hotel for upcoming trips and, depending on the technology implemented at each location, the GTRIIP app can be opened to check in via TouchID, using the smartphone as both a check-in mechanism and a physical access key. The technology can also be easily leveraged to secure employee check-ins at company offices.
EyeprintID
Created by EyeVerify, EyeprintID is designed to use the characteristics of the eyeball to unlock smartphones, log into applications and verify mobile payments. Its technology hones in on small details, including eye veins, to verify the identity of subjects. EyeVerify notes that because eye prints do not change day-to-day or year-to-year, they are one of the most stable biometrics. The EyeprintID app and a 1-megapixel smartphone camera is all that’s needed to log in via EyeprintID.
Kerv
Kerv is a contactless payment wearable that comes in the form of a ring. Users download the Kerv app, where they can manage a prepaid account linked to the device. When it comes time to pay, Kerv utilizes Near-Field Communication to connect with a contactless payment device. Money for the purchase is withdrawn from the prepaid Kerv account, which can be connected to a bank account, debit card, or credit card. Transactions up to $25 can be made with the Kerv, and users can turn on a setting to have the ring automatically top up when funds run low. Kerv retails for £49.99.
