{"componentChunkName":"component---src-templates-blog-list-template-js","path":"/identity/42","result":{"data":{"allMarkdownRemark":{"edges":[{"node":{"excerpt":"We’re living in an era where almost everything is just a few clicks away, and the internet is becoming the second home for all of us…","fields":{"slug":"/identity/nist-password-guidelines-2021/"},"html":"<p>We’re living in an era where almost everything is just a few clicks away, and the internet is becoming the second home for all of us.</p>\n<p>Whether it’s entertainment or essential purchasing, we’re catered to everything online in the digital world.</p>\n<p>But with the increase in the use of the internet, the risk of security breach and identity thefts have augmented substantially.</p>\n<p>Businesses are compromising sensitive user data and consumer identities that not only cause losses worth millions but eventually tarnish brand repute.  </p>\n<p>To cope with the increasing number of cyber frauds and data thefts, the National Institute of Standards and Technology (NIST) has issued certain requirements along with controls for digital user identities.</p>\n<p>The NIST has dispensed several guidelines that not only ensure security to the user but eventually help enterprises secure their crucial business information.</p>\n<p>These guidelines offer recommendations for users for <a href=\"https://www.loginradius.com/blog/identity/loginradius-password-policy-business-consumer/\">creating strong passwords</a> along with recommendations for vendors/verifiers that are handling passwords.</p>\n<p>Let’s have a quick look at some of the most important NIST guidelines and the cybersecurity best practices to follow in 2021.</p>\n<h2 id=\"nist-overview\" style=\"position:relative;\"><a href=\"#nist-overview\" aria-label=\"nist overview permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>NIST Overview</h2>\n<p>Recognizing the national and economic security of the United States depends on the reliable functioning of critical infrastructure. The NIST Cybersecurity Framework is a thorough collaboration between industry and government, and consists of standards, guidelines, and practices to promote the protection of critical infrastructure.</p>\n<p>The prioritized, flexible, repeatable, and cost-effective approach of the Framework helps owners and operators of critical infrastructure to manage cybersecurity-related risk.</p>\n<p>The NIST Cybersecurity Framework consists of several guiding standards:</p>\n<ul>\n<li>NIST SP 800-53 (Revision 4)</li>\n<li>NIST SP 800-171</li>\n<li>The OMB Trusted Internet Connection (TIC) Initiative—FedRAMP Overlay (pilot) </li>\n<li>The DoD Cloud Computing Security Requirements Guide (SRG)</li>\n</ul>\n<p>Now, let’s have a quick look at some of the password guidelines issued by NIST.</p>\n<h3 id=\"processing-and-password-length\" style=\"position:relative;\"><a href=\"#processing-and-password-length\" aria-label=\"processing and password length permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Processing and Password Length</h3>\n<p>As per the NIST latest guidelines, the length of a password is a crucial security aspect, and all user-created passwords must be at least 8 characters in length.</p>\n<p>Moreover, the passwords generated by machines must be a minimum of 6 characters in length. Apart from this, the maximum character length must be 64 characters.</p>\n<p>Now, the essential aspect for enterprises is that during the verification process, the verifiers shouldn’t truncate passwords while processing. Instead, the passwords should be adequately hashed and must be salted.</p>\n<p>This reinforces the security of credentials. Also, the user should be allowed a minimum of 10 attempts to enter their password before locking their profile.</p>\n<p><strong>Also Read</strong>: <a href=\"https://www.loginradius.com/blog/identity/cybersecurity-best-practices-for-enterprises/\">Cybersecurity Best Practices for Businesses in 2021</a> </p>\n<h3 id=\"no-more-hints\" style=\"position:relative;\"><a href=\"#no-more-hints\" aria-label=\"no more hints permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>No More Hints</h3>\n<p>NIST has advised the vendors and verifiers to dismiss the use of password hints that were earlier offered to users for creating more complex passwords.</p>\n<p>Since these hints can allow attackers to guess the passwords, these hints shouldn’t be used in any form to ensure the highest level of security for users and service providers.</p>\n<p>Moreover, KBA (Knowledge-based Authentication), which was earlier a part of the authentication process that includes questions like- “Where you were born?” were asked to prove identity.</p>\n<h3 id=\"two-factor-authentication-and-password-managers\" style=\"position:relative;\"><a href=\"#two-factor-authentication-and-password-managers\" aria-label=\"two factor authentication and password managers permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Two-Factor Authentication and Password Managers</h3>\n<p>The users must be provided with the ability to paste passwords into password fields as users incline towards the use of password managers for a seamless authentication experience.</p>\n<p>Earlier, the verifiers didn’t allow the users to paste a password just because of security concerns. But now, service providers need to revoke the same for enhanced user experience.</p>\n<p>Apart from this, the use of <a href=\"https://www.loginradius.com/blog/identity/how-secure-2fa/\">two-factor authentication</a> must be emphasized as SMS isn’t considered a secure option.</p>\n<p>The verifiers need to rely on strong multi-factor authentication methods that provide authentication using secure one-time links or must use Google Authenticator.</p>\n<h3 id=\"hashing\" style=\"position:relative;\"><a href=\"#hashing\" aria-label=\"hashing permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Hashing</h3>\n<p>Password hashing is crucial in today’s era as it’s no longer safe to store passwords in plain text formats, which can be easily exploited.</p>\n<p>Password hashing is defined as the method to one-way transform a password that turns the password into another string called hashed password. This means that the password can’t be reversed to its original form once hashed.</p>\n<p>NIST recommends the use of password hashing algorithms while storing and retrieving passwords. The identity providers must rely on a secure password management mechanism that ensures hashing of passwords of the users within a network for enhanced security.</p>\n<h2 id=\"loginradius--the-ultimate-solution-covering-a-larger-footprint-of-the-overall-nist-cybersecurity-framework\" style=\"position:relative;\"><a href=\"#loginradius--the-ultimate-solution-covering-a-larger-footprint-of-the-overall-nist-cybersecurity-framework\" aria-label=\"loginradius  the ultimate solution covering a larger footprint of the overall nist cybersecurity framework permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>LoginRadius <strong>—</strong> The Ultimate Solution Covering a Larger Footprint of the Overall NIST Cybersecurity Framework</h2>\n<p>The NIST Cybersecurity Framework is worth adopting solely for its stated goal of improving risk-based security. But it also delivers ancillary benefits that include effective collaboration and communication of security posture with executives and industry organizations, as well as potential future improvements in legal exposure and even assistance with regulatory compliance.</p>\n<p>The NIST Cybersecurity Framework is NOT just for “government applications.” It represents a state-of-the-art approach to security and compliance.</p>\n<p><a href=\"https://www.loginradius.com/resource/loginradius-ciam-passwordless-login/\"><img src=\"/3b805aa6360a4f8988029e88494d1c9d/DS-passwordless-login.webp\" alt=\"DS-passwordless-login\"></a></p>\n<p>Here’s what enterprises get with the LoginRadius consumer identity and access management (CIAM) solution:</p>\n<ul>\n<li><strong>Compliance:</strong> LoginRadius is NIST CSF audited and certified and offers CCPA and GDPR compliances.</li>\n<li><strong>Multi-Factor Authentication:</strong> LoginRadius offers stringent authentication backed by multi-factor authentication (MFA).</li>\n<li><strong>Risk-based Authentication:</strong> LoginRadius CIAM provides adaptive MFA, i.e., risk-based authentication, which adds another stringent layer of authentication whenever something suspicious is detected during a login attempt.</li>\n<li><strong>Quick Insights:</strong> Get valuable insights regarding user behavior to create the best marketing strategy and to provide different offers to users.</li>\n<li><strong>Single Sign-On (SSO):</strong> Enhance user experience with LoginRadius Single Sign-On that helps users to stay authenticated while switching applications or programs.</li>\n<li><strong>Passwordless Login:</strong> <a href=\"https://www.loginradius.com/passwordless-login/\">LoginRadius’ Passwordless Login</a> helps enterprises build the next level of user authentication experience that improves engagement and enhances conversions.</li>\n<li><strong>Social Login:</strong> LoginRadius CIAM helps your users to leverage their social media to quickly authenticate within a couple of seconds for a seamless login experience. </li>\n</ul>\n<h2 id=\"final-thoughts\" style=\"position:relative;\"><a href=\"#final-thoughts\" aria-label=\"final thoughts permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Final Thoughts</h2>\n<p>Enterprises embarking on a journey to enhance business growth while matching the pace with the best cybersecurity hygiene should consider NIST password guidelines while making password policies for users.</p>\n<p>When it comes to creating a flawless login experience backed by security, LoginRadius leaves no stone unturned in delivering the finest experience.</p>\n<p>LoginRadius is self-attested to the NIST Cybersecurity Framework as part of its internal infosec program and aligns with the NIST SP 800-53 component, leveraging the CSA CCM, which covers a broader footprint of the overall NIST cybersecurity framework.</p>\n<p>Need help with NIST? <a href=\"https://www.loginradius.com/contact-sales/\">Reach us</a> for quick guidance today.</p>\n<p><a href=\"https://www.loginradius.com/contact-us?utm_source=blog&#x26;utm_medium=web&#x26;utm_campaign=nist-password-guidelines-2021\"><img src=\"/8fce571f703a5970dbb1359a2fe0e51a/book-a-demo-loginradius.webp\" alt=\"book-a-free-demo-loginradius\"></a></p>\n<style class=\"grvsc-styles\">\n  .grvsc-container {\n    overflow: auto;\n    -webkit-overflow-scrolling: touch;\n    padding-top: 1rem;\n    padding-top: var(--grvsc-padding-top, var(--grvsc-padding-v, 1rem));\n    padding-bottom: 1rem;\n    padding-bottom: var(--grvsc-padding-bottom, var(--grvsc-padding-v, 1rem));\n    border-radius: 8px;\n    border-radius: var(--grvsc-border-radius, 8px);\n    font-feature-settings: normal;\n  }\n  \n  .grvsc-code {\n    display: inline-block;\n    min-width: 100%;\n  }\n  \n  .grvsc-line {\n    display: inline-block;\n    box-sizing: border-box;\n    width: 100%;\n    padding-left: 1.5rem;\n    padding-left: var(--grvsc-padding-left, var(--grvsc-padding-h, 1.5rem));\n    padding-right: 1.5rem;\n    padding-right: var(--grvsc-padding-right, var(--grvsc-padding-h, 1.5rem));\n  }\n  \n  .grvsc-line-highlighted {\n    background-color: var(--grvsc-line-highlighted-background-color, transparent);\n    box-shadow: inset var(--grvsc-line-highlighted-border-width, 4px) 0 0 0 var(--grvsc-line-highlighted-border-color, transparent);\n  }\n  \n</style>","frontmatter":{"date":"July 22, 2021","updated_date":null,"description":"The National Institute of Standards and Technology (NIST) has issued certain requirements along with controls for digital user identities. Let’s have a quick look at some of the important NIST password guidelines and learn how businesses can ensure maximum security in 2021 and beyond.","title":"How NIST is Changing Password Creation in 2021","tags":["security"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.5151515151515151,"src":"/static/2814d8907d87c607b53a10e29acef63b/58556/nist-password-guidelines-2021-cover.webp","srcSet":"/static/2814d8907d87c607b53a10e29acef63b/61e93/nist-password-guidelines-2021-cover.webp 200w,\n/static/2814d8907d87c607b53a10e29acef63b/1f5c5/nist-password-guidelines-2021-cover.webp 400w,\n/static/2814d8907d87c607b53a10e29acef63b/58556/nist-password-guidelines-2021-cover.webp 800w,\n/static/2814d8907d87c607b53a10e29acef63b/cc834/nist-password-guidelines-2021-cover.webp 1024w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Deependra Singh","github":null,"avatar":null}}}},{"node":{"excerpt":"The world is facing an uphill battle amid the global pandemic that has forced small and medium businesses to adopt diverse digital sales…","fields":{"slug":"/identity/risk-management-essentials-enterprise/"},"html":"<p>The world is facing an uphill battle amid the global pandemic that has forced small and medium businesses to adopt diverse digital sales channels.</p>\n<p>Since these businesses collect consumer data, which is swiftly accumulating, there’s a significant concern regarding the overall security.</p>\n<p>Talking about the stats,<a href=\"https://www.who.int/news-room/detail/23-04-2020-who-reports-fivefold-increase-in-cyber-attacks-urges-vigilance\"> WHO reported 450 active official email addresses and passwords</a> were leaked online along with thousands of other credentials – all linked with people working to lessen the COVID-19 impact.</p>\n<p>The more alarming thing is the fact that cybercriminals are continuously exploiting consumer data and have accelerated outbreaks by taking advantage of the chaotic time and the weaker first line of defense as businesses move to remote working ecosystems.</p>\n<p>So does it mean that businesses collecting consumer identities are now at more significant risk, especially those who have recently stepped into the digital commerce space?</p>\n<p>Yes, undoubtedly! Enterprises that are collecting, managing, and storing consumer identities in any form need to put their best foot forward in protecting sensitive consumer information, which, if not done at the earliest, may lead to undesirable consequences.</p>\n<p>Whether it’s the media industry or the education industry,<a href=\"https://www.loginradius.com/blog/identity/cyber-threats-business-risk-covid-19/\"> every industry is at a considerable risk of a security breach.</a>  </p>\n<p>In this post, we’ve outlined the aspects that can mitigate the risk during the uncertain times of COVID-19 and can help secure your business in a post-pandemic world.</p>\n<h3 id=\"1-creating-a-strong-password-policy-to-secure-remote-operation\" style=\"position:relative;\"><a href=\"#1-creating-a-strong-password-policy-to-secure-remote-operation\" aria-label=\"1 creating a strong password policy to secure remote operation permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>1. Creating a Strong Password Policy to Secure Remote Operation</h3>\n<p>Since remote working accounted for<a href=\"https://resources.malwarebytes.com/files/2020/08/Malwarebytes_EnduringFromHome_Report_FINAL.pdf\"> 20% of cybersecurity incidents</a> during the pandemic, securing the newly-adopted remote working ecosystem should be the #1 priority of businesses.</p>\n<p>To protect your organization's network, enforce a firm password security policy with the following practices:</p>\n<ul>\n<li><strong>Long passwords</strong>: The minimum length should be 15 characters, more if possible.</li>\n<li><strong>Mix characters</strong>: The password should be a combination of uppercase and lowercase letters, numbers, and symbols. The more complex your password is, the harder it will be for brute-force attackers.</li>\n<li><strong>Do not allow dictionary words</strong>: Do not use everyday dictionary words or even a combination of words. For example, \"chocolate\" is a bad password, so is \"dark chocolate\". Go for a passphrase instead. They are a string of related words with no sentence structure. Here is an example: hotdog food ketchup relish mustard mayo.</li>\n<li><strong>Don’t use memorable keyboard paths</strong>: Do not use sequential keyboard paths like qwerty, a1s2d3f4, or asdfgh.</li>\n<li><strong>Change passwords regularly</strong>: Change passwords at a regular interval. It can be once every month or twice a month.</li>\n<li><strong>Use a password manager</strong>: Password managers can auto-generate and store strong passwords on your behalf. They save your passwords in an encrypted, centralized location and allow you to access them with a master password.</li>\n</ul>\n<h3 id=\"2-embrace-multi-factor-authentication-mfa-to-prevent-unauthorized-access\" style=\"position:relative;\"><a href=\"#2-embrace-multi-factor-authentication-mfa-to-prevent-unauthorized-access\" aria-label=\"2 embrace multi factor authentication mfa to prevent unauthorized access permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>2. Embrace Multi-Factor Authentication (MFA) to Prevent Unauthorized Access</h3>\n<p>Cybercriminals are already bypassing weak lines of defense, which means a stringent action plan must be in place to</p>\n<p>When it comes to preventing unauthorized access to resources and sensitive information within a network, MFA can be the game-changer.</p>\n<p>For the most secure user sign-ins, you should combine elements like biometrics, SMS/text messages, emails, and security questions. Use<a href=\"https://www.loginradius.com/blog/identity/what-is-multi-factor-authentication/\"> extra layers of protection</a>, like text verification, email verification, or time-based security codes.</p>\n<p>LoginRadius’ CIAM (consumer identity and access management) solution provides multiple layers of security to ensure consumer data and enterprise information remain highly secure.</p>\n<p><a href=\"https://www.loginradius.com/resource/ebook/buyers-guide-to-multi-factor-authentication/\"><img src=\"/b319bf6ed09ba90828b27b6cc2c2eb75/EB-GD-to-MFA.webp\" alt=\"EB-GD-to-MFA\"></a></p>\n<h3 id=\"3-cyber-awareness-training-to-avoid-human-error\" style=\"position:relative;\"><a href=\"#3-cyber-awareness-training-to-avoid-human-error\" aria-label=\"3 cyber awareness training to avoid human error permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>3. Cyber Awareness Training to Avoid Human Error</h3>\n<p>Most cyber criminals try to sneak into a network by targeting employees through several attacks, including phishing, social engineering, and malware attacks.</p>\n<p>Suppose the employees of an organization aren’t aware of the latest attacks and how they can enhance their security while working. In that case, it may lead to a security breach causing millions of dollars of losses to the organization.</p>\n<p>Businesses must minimize human error as most of the attacks are successful just because of human error.</p>\n<p>Frequent cyber awareness training sessions must be organized within the enterprise to ensure that employees are aware of phishing emails and social engineering attacks and can handle these issues at their end.</p>\n<h3 id=\"4-unleash-the-potential-of-risk-based-authentication-rba\" style=\"position:relative;\"><a href=\"#4-unleash-the-potential-of-risk-based-authentication-rba\" aria-label=\"4 unleash the potential of risk based authentication rba permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>4. Unleash the Potential of Risk-Based Authentication (RBA)</h3>\n<p>Risk-based authentication is perhaps the best weapon against unauthorized access and to enhance network security.</p>\n<p><a href=\"https://www.loginradius.com/blog/identity/risk-based-authentication/\">RBA is a mechanism</a> that automatically adds another stringent layer of authentication whenever the system detects any unusual login attempt or an attempt that seems fishy.</p>\n<p>For instance, if a user tries to log in from his/her town and in a few minutes, a similar login request is made from another country (even if the login credentials are the same), the user would need to prove identity through another authentication process. An alert regarding the same would also be sent to the admin.</p>\n<h3 id=\"5-data-encryption--the-need-of-the-hour\" style=\"position:relative;\"><a href=\"#5-data-encryption--the-need-of-the-hour\" aria-label=\"5 data encryption  the need of the hour permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>5. Data Encryption- The Need of the Hour</h3>\n<p>To ensure data security on mobile devices and build trustworthiness, encryption must be in place. In this process, data is encoded to be inaccessible to unauthorized users and helps to protect sensitive data and private information.</p>\n<p><a href=\"https://www.loginradius.com/blog/engineering/encryption-and-hashing/\">Encryption</a> can also improve the security of communication between servers and client apps.</p>\n<p>Although encryption is basic, it's an essential aspect of data security. Organizations must do all that they can to protect their customer's information online as well as their own. Hence, it's becoming more and more common for technology encryption to be activated on apps and websites.</p>\n<h2 id=\"final-words\" style=\"position:relative;\"><a href=\"#final-words\" aria-label=\"final words permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Final Words</h2>\n<p>With the rising number of identity thefts and security breaches amid the global pandemic, enterprises that haven’t yet deployed a consumer identity and access management solution should immediately put their best foot forward to reinforce their security mechanism.</p>\n<p><a href=\"https://www.loginradius.com/contact-sales/\">LoginRadius</a> can be the most acceptable alternative for both the enterprises and startups that are collecting customer data and need to ensure a secure ecosystem without hampering the overall user experience.</p>\n<p><a href=\"https://www.loginradius.com/contact-us?utm_source=blog&#x26;utm_medium=web&#x26;utm_campaign=risk-management-essentials-enterprise\"><img src=\"/8fce571f703a5970dbb1359a2fe0e51a/book-a-demo-loginradius.webp\" alt=\"book-a-demo-loginradius\"></a></p>\n<style class=\"grvsc-styles\">\n  .grvsc-container {\n    overflow: auto;\n    -webkit-overflow-scrolling: touch;\n    padding-top: 1rem;\n    padding-top: var(--grvsc-padding-top, var(--grvsc-padding-v, 1rem));\n    padding-bottom: 1rem;\n    padding-bottom: var(--grvsc-padding-bottom, var(--grvsc-padding-v, 1rem));\n    border-radius: 8px;\n    border-radius: var(--grvsc-border-radius, 8px);\n    font-feature-settings: normal;\n  }\n  \n  .grvsc-code {\n    display: inline-block;\n    min-width: 100%;\n  }\n  \n  .grvsc-line {\n    display: inline-block;\n    box-sizing: border-box;\n    width: 100%;\n    padding-left: 1.5rem;\n    padding-left: var(--grvsc-padding-left, var(--grvsc-padding-h, 1.5rem));\n    padding-right: 1.5rem;\n    padding-right: var(--grvsc-padding-right, var(--grvsc-padding-h, 1.5rem));\n  }\n  \n  .grvsc-line-highlighted {\n    background-color: var(--grvsc-line-highlighted-background-color, transparent);\n    box-shadow: inset var(--grvsc-line-highlighted-border-width, 4px) 0 0 0 var(--grvsc-line-highlighted-border-color, transparent);\n  }\n  \n</style>","frontmatter":{"date":"July 20, 2021","updated_date":null,"description":"Cybercriminals continuously exploit consumer data and have accelerated outbreaks by taking advantage of the chaotic time, and the weaker first line of defense as businesses adopt new working ecosystems. This post covers all the aspects that require immediate consideration to minimize the risk of identity theft or a security breach.","title":"COVID-19 and Beyond: 5 Risk Management Essentials for Your Enterprise","tags":["risk management","cybersecurity","ciam solution","password management"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.5037593984962405,"src":"/static/fcf2926caac8812410816eca189741aa/58556/risk-management-essentials-enterprise-cover.webp","srcSet":"/static/fcf2926caac8812410816eca189741aa/61e93/risk-management-essentials-enterprise-cover.webp 200w,\n/static/fcf2926caac8812410816eca189741aa/1f5c5/risk-management-essentials-enterprise-cover.webp 400w,\n/static/fcf2926caac8812410816eca189741aa/58556/risk-management-essentials-enterprise-cover.webp 800w,\n/static/fcf2926caac8812410816eca189741aa/99238/risk-management-essentials-enterprise-cover.webp 1200w,\n/static/fcf2926caac8812410816eca189741aa/7c22d/risk-management-essentials-enterprise-cover.webp 1600w,\n/static/fcf2926caac8812410816eca189741aa/25f09/risk-management-essentials-enterprise-cover.webp 1920w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Vishal Sharma","github":null,"avatar":null}}}},{"node":{"excerpt":"Username and password were considered the only way to authenticate a user when we look back into ancient times. However, with advancements…","fields":{"slug":"/identity/webauth-secures-user-login/"},"html":"<p>Username and password were considered the only way to authenticate a user when we look back into ancient times.</p>\n<p>However, with advancements in technology, authentication has witnessed significant progress in the past couple of years.</p>\n<p>Today, when it comes to securing user accounts and offering the finest user experience, WebAuthn leaves no stone untouched in delivering a seamless authentication experience.</p>\n<p><a href=\"https://www.loginradius.com/blog/engineering/webauthn-authentication-application/\">WebAuth</a> has offered endless benefits to enterprises striving to manage and secure consumer identities and data as it sets a new bar for user authentication.</p>\n<p>Moreover, with robust authentication backed by a flawless user experience, including passwordless experience, WebAuthn provides a long list of opportunities to businesses.</p>\n<p>In this post, we’ll learn more about WebAuthn and how it paves the path for a secure and seamless user login experience.</p>\n<h2 id=\"what-is-webauth\" style=\"position:relative;\"><a href=\"#what-is-webauth\" aria-label=\"what is webauth permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>What is WebAuth</h2>\n<p>For those who aren’t aware of the term ‘WebAuthn’- it is a new standard for authentication, which is published by the World Wide Web Consortium and is supported by the FIDO alliance.</p>\n<p>WebAuthn works by offering a way for users to authenticate through third-party authentication providers. These third-party authentication providers can be built into the operating system, like Windows Hello, or Android biometrics, and even external authenticators, including a USB authenticator.</p>\n<p>Since the use of WebAuthn is now becoming an industry-standard in the digital world, enterprises must gear up to leverage their true potential when it comes to securing consumer data.</p>\n<h2 id=\"how-webauthn-works\" style=\"position:relative;\"><a href=\"#how-webauthn-works\" aria-label=\"how webauthn works permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>How WebAuthn Works</h2>\n<p>WebAuthn is supported on various web browsers including Firefox, Chrome, Edge, and Safari. It’s a part of the <a href=\"https://www.loginradius.com/resource/fido2-authentication-standard-datasheet\">FIDO2 framework</a> and this framework is a set of technologies that enables authentication without the reliance on passwords between servers, authenticators, and web browsers.</p>\n<p>The Web Authentication API (WebAuthn) allows servers to quickly register and provide authentication to users that are using public-key cryptography instead of username and passwords.</p>\n<p>In this overall process, a private-public key pair, i.e., the credential is created for a web application and the private key is securely stored on a particular user’s device. On the other hand, the public key along with the credential ID (randomly generated) is further sent to the server for storage. The server further uses that particular public key to prove the identity of a user.</p>\n<p>Also, the public key here is no secret. The reason is, it becomes useless without a corresponding private key. Now even if the attacker has the public key, it’s of no use.</p>\n<h2 id=\"how-does-it-work-for-user-login\" style=\"position:relative;\"><a href=\"#how-does-it-work-for-user-login\" aria-label=\"how does it work for user login permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>How does it Work for User Login</h2>\n<p>WebAuthn is widely used to provide biometric MFA (multi-factor authentication) where voice, fingerprint, or a retina scan is considered as a unique factor to a particular user.</p>\n<p>Today, most of the devices have a biometric device, like a smartphone, which can use the unique data that further creates and manages credentials, which can be accessed only by the owner.</p>\n<p>Since WebAuthn supports MFA, it can help to replace the standard website or web application password as it’s a far more secure way of authenticating.</p>\n<p>Whenever a user needs to prove their identity, the smart biometric can be utilized to authenticate a user on a particular platform without the need to enter credentials again and again.</p>\n<p>Let’s understand this with a real-life example where we can use WebAuthn for handling authentication after an individual has registered with a web application.</p>\n<p><a href=\"https://www.loginradius.com/resource/ebook/buyers-guide-to-multi-factor-authentication/\"><img src=\"/b319bf6ed09ba90828b27b6cc2c2eb75/EB-GD-to-MFA.webp\" alt=\"EB-GD-to-MFA\"></a></p>\n<p>Suppose the user is registered from their phone and navigates to the web application to log in. In that case, they are prompted to enter their password or biometric, which is associated with that particular account. The user can simply use their biometric to log in without the need to enter lengthy passwords.</p>\n<p>Apart from this, the website or web application owner can also use it for multi-factor authentication that further reinforces overall login security.</p>\n<p>In this entire scenario, the user login is secured as attackers that have access to user credentials cannot access the account as MFA kicks in and demands the user to go through another stringent authentication process.</p>\n<h2 id=\"implementing-passwordless-authentication-with-loginradius\" style=\"position:relative;\"><a href=\"#implementing-passwordless-authentication-with-loginradius\" aria-label=\"implementing passwordless authentication with loginradius permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Implementing Passwordless Authentication with LoginRadius</h2>\n<p>The best way to provide seamless registration and authentication for your customers is with a <a href=\"https://www.loginradius.com/blog/identity/passwordless-authentication-the-future-of-identity-and-security/\">passwordless login</a> solution through WebAuthn. This gives your users a hassle-free way to access their accounts—with no passwords needed! </p>\n<p>The LoginRadius Identity Platform is an out-of-the-box way for you to do this easily. The identity and access management platform is fully customizable too, so you can simplify your customer experience to suit your company’s needs.</p>\n<h2 id=\"how-does-loginradius-passwordless-authentication-work\" style=\"position:relative;\"><a href=\"#how-does-loginradius-passwordless-authentication-work\" aria-label=\"how does loginradius passwordless authentication work permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>How does LoginRadius Passwordless Authentication Work?</h2>\n<p><strong>Step 1:</strong> On the website login page, a customer will be asked to enter the email address. It will act as their username too.</p>\n<p><strong>Step 2:</strong> LoginRadius will send a temporary verification link to the associated email address. You can custom-set the duration that link will remain active before it expires.</p>\n<p><strong>Step 3:</strong> The customer is prompted to click the verification link, which is then authenticated and redirected to the website the customer originated from.</p>\n<h2 id=\"conclusion\" style=\"position:relative;\"><a href=\"#conclusion\" aria-label=\"conclusion permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Conclusion</h2>\n<p>As the number of data breaches increases due to credential misuse, adding robust layers of security for your consumers is the need of the hour.</p>\n<p>WebAuthn could be a game-changer for any business striving to <a href=\"https://www.loginradius.com/customer-security/\">win consumer trust</a> as it offers a great user experience backed with the highest level of security.</p>\n<p>If you wish to deliver the next level of login experience to your consumers that not only ensures robust security but eventually helps to scale your business growth, LoginRadius is what you need.</p>\n<p><a href=\"https://www.loginradius.com/contact-sales/\">Reach us</a> for a personalized demo and know-how LoginRadius works for your business.</p>\n<p><a href=\"https://www.loginradius.com/contact-us?utm_source=blog&#x26;utm_medium=web&#x26;utm_campaign=webauth-secures-user-login\"><img src=\"/8fce571f703a5970dbb1359a2fe0e51a/book-a-demo-loginradius.webp\" alt=\"book-a-demo-loginradius\"></a></p>\n<style class=\"grvsc-styles\">\n  .grvsc-container {\n    overflow: auto;\n    -webkit-overflow-scrolling: touch;\n    padding-top: 1rem;\n    padding-top: var(--grvsc-padding-top, var(--grvsc-padding-v, 1rem));\n    padding-bottom: 1rem;\n    padding-bottom: var(--grvsc-padding-bottom, var(--grvsc-padding-v, 1rem));\n    border-radius: 8px;\n    border-radius: var(--grvsc-border-radius, 8px);\n    font-feature-settings: normal;\n  }\n  \n  .grvsc-code {\n    display: inline-block;\n    min-width: 100%;\n  }\n  \n  .grvsc-line {\n    display: inline-block;\n    box-sizing: border-box;\n    width: 100%;\n    padding-left: 1.5rem;\n    padding-left: var(--grvsc-padding-left, var(--grvsc-padding-h, 1.5rem));\n    padding-right: 1.5rem;\n    padding-right: var(--grvsc-padding-right, var(--grvsc-padding-h, 1.5rem));\n  }\n  \n  .grvsc-line-highlighted {\n    background-color: var(--grvsc-line-highlighted-background-color, transparent);\n    box-shadow: inset var(--grvsc-line-highlighted-border-width, 4px) 0 0 0 var(--grvsc-line-highlighted-border-color, transparent);\n  }\n  \n</style>","frontmatter":{"date":"July 20, 2021","updated_date":null,"description":"WebAuthn is a new standard for authentication, which is published by the World Wide Web Consortium and is supported by the FIDO alliance. In this post, we’ve highlighted the role of WebAuthn and how it helps to create a secure login experience for consumers.","title":"How WebAuth Secures Your Users’ Login","tags":["passwordless authentication","mfa","cx"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.5037593984962405,"src":"/static/0df4fb4774d60c2a75c0bf7a37f97ba8/58556/webauth-secures-user-login-cover.webp","srcSet":"/static/0df4fb4774d60c2a75c0bf7a37f97ba8/61e93/webauth-secures-user-login-cover.webp 200w,\n/static/0df4fb4774d60c2a75c0bf7a37f97ba8/1f5c5/webauth-secures-user-login-cover.webp 400w,\n/static/0df4fb4774d60c2a75c0bf7a37f97ba8/58556/webauth-secures-user-login-cover.webp 800w,\n/static/0df4fb4774d60c2a75c0bf7a37f97ba8/cc834/webauth-secures-user-login-cover.webp 1024w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Vishal Sharma","github":null,"avatar":null}}}},{"node":{"excerpt":"Introduction Adaptive authentication is a game-changer for enterprises that require strong fencing to protect consumer and enterprise data…","fields":{"slug":"/identity/adaptive-authentication/"},"html":"<h2 id=\"introduction\" style=\"position:relative;\"><a href=\"#introduction\" aria-label=\"introduction permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Introduction</h2>\n<p>Adaptive authentication is a game-changer for enterprises that require strong fencing to protect consumer and enterprise data. Here’s a quick read depicting the role and need for adaptive authentication instead of just multi-factor authentication.</p>\n<p>With technology evolving leaps and bounds, identity and access management become stringently important for businesses collecting user information.</p>\n<p>However, managing the identities of millions of consumers wasn’t a tough nut to crack earlier as it is today.</p>\n<p>Especially in the most unpredictable times of COVID-19 when the world is witnessing a <a href=\"https://www.statista.com/statistics/1175574/increase-cyber-fraud-coronavirus-outbreak/\">substantial surge in the number of security breaches</a>.</p>\n<p>Security layers backed by multi-factor authentication (MFA) were considered entirely secure when enterprises had a limited number of consumers.</p>\n<p>We’re talking about the era when no one expected the abrupt rise of SaaS applications for the enhanced business process containing heaps of sensitive data (client and organization).</p>\n<p>For many enterprises, this meant the need to implement multi-factor authentication, which, however, proved to be fruitful but may not work in a high-risk event.</p>\n<p>So, does it mean that multi-factor authentication isn’t the best authentication mechanism?</p>\n<p>Yes, as things have drastically changed now.</p>\n<p>Let’s quickly learn about the next level of authentication- “Adaptive Authentication,” and how it’s paving a path for a robust security ecosystem in today’s era.</p>\n<h2 id=\"the-need-for-adaptive-authentication\" style=\"position:relative;\"><a href=\"#the-need-for-adaptive-authentication\" aria-label=\"the need for adaptive authentication permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>The Need for Adaptive Authentication</h2>\n<p>Usernames and passwords alone can’t guarantee enough security for users and the enterprise since attackers are continuously bypassing frailer defense systems.</p>\n<p>Moreover, multi-factor authentication also seems ineffective in certain situations when the risk is relatively high, and it raises the need for a rigid security mechanism.</p>\n<p>In recent years, adaptive authentication has been integrated with <a href=\"https://www.loginradius.com/blog/identity/customer-identity-and-access-management/\">customer identity and access management</a> (CIAM) platforms and is considered the best approach since authenticated users can only access data and resources.</p>\n<p>Let’s dig deeper into this and understand the ultimate approach to best secure user identities and data and sensitive business information.</p>\n<h2 id=\"what-is-multi-factor-authentication\" style=\"position:relative;\"><a href=\"#what-is-multi-factor-authentication\" aria-label=\"what is multi factor authentication permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>What is Multi-Factor Authentication?</h2>\n<p>Multi-factor authentication (MFA) is a multi-layered protection framework that verifies users’ login or other transaction identities to provide access to certain resources.</p>\n<p>A few examples of multi-factor authentication are codes created by mobile apps, answers to personal security questions, codes sent to an email address, fingerprints, etc.</p>\n<p>Read this post to get the detailed information regarding <a href=\"https://www.loginradius.com/blog/identity/what-is-multi-factor-authentication/\">multi-factor authentication</a>, how it works, and how to quickly set up multi-factor authentication.</p>\n<h2 id=\"what-is-adaptive-authentication\" style=\"position:relative;\"><a href=\"#what-is-adaptive-authentication\" aria-label=\"what is adaptive authentication permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>What is Adaptive Authentication?</h2>\n<p>Just like multi-factor authentication, adaptive authentication also verifies an identity but eventually considers certain security risk factors.</p>\n<p><a href=\"https://www.loginradius.com/blog/engineering/What-is-adaptive-authentication/\">Adaptive Authentication</a> (also known as Risk-based Authentication) or adaptive multifactor authentication is a method to send notifications or prompt the consumers to complete an additional step(s) to verify their identities when the authentication request is deemed malicious according to your organization's security policy.</p>\n<p>In a nutshell, Adaptive Authentication analyzes the user interaction with your application and intelligently builds a risk profile based on the consumer behavior or your organization's security policy.</p>\n<p>And when we talk about adaptive authentication example, let’s consider a scenario where a user tries to log into its account from a different device/location or changes the pattern of logging in into his/her account. Here, the smart system will detect an unusual activity and would eventually add another stringent layer of authentication. </p>\n<p>This approach improves overall security by ensuring that high-risk consumers have the highest level of adaptable and flexible security in place.</p>\n<p>Apart from this, adaptive authentication is considered far smarter than multi-factor authentication since it responds to the device that attempts to log in, the IP address, and the geographical location of the attempt.</p>\n<p>This means the mechanism automatically implements robust authentication controls whenever a login seems to be suspicious.</p>\n<p><a href=\"https://www.loginradius.com/resource/fixing-broken-authentication-with-adaptive-mfa/\"><img src=\"/8cd06df3a6214819919656d4dece050d/LoginRadius-Adaptive-MFA.webp\" alt=\"LoginRadius-Adaptive-MFA\"></a></p>\n<h2 id=\"adaptive-authentication-and-strong-customer-authentication\" style=\"position:relative;\"><a href=\"#adaptive-authentication-and-strong-customer-authentication\" aria-label=\"adaptive authentication and strong customer authentication permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Adaptive Authentication and Strong Customer Authentication</h2>\n<p>Adaptive authentication and strong customer authentication are two important methods used by businesses to protect against fraudulent activities and ensure secure transactions. </p>\n<p>Adaptive authentication or adaptive multifactor authentication involves the use of multiple authentication factors, such as passwords, biometric data, and security tokens, to verify the identity of users based on risk factors such as the location and type of device being used. </p>\n<p>SCA is a regulatory requirement under the European Union's Payment Services Directive 2 (PSD2), which mandates the use of at least two independent authentication factors for all electronic transactions. </p>\n<p>This ensures that only authorized individuals can access sensitive data or perform financial transactions. Together, adaptive authentication and SCA provide a multi-layered approach to security, enhancing user protection and mitigating the risk of cyber attacks.</p>\n<h2 id=\"working-mechanism-of-adaptive-authentication\" style=\"position:relative;\"><a href=\"#working-mechanism-of-adaptive-authentication\" aria-label=\"working mechanism of adaptive authentication permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Working Mechanism of Adaptive Authentication</h2>\n<p>Whenever an authentication request is estimated as a malicious attempt, based on the risk factors defined for your application, it triggers one or more of the following actions as per your predefined requirements:</p>\n<ul>\n<li>Email Notification: An email with a notification regarding the authentication request is sent to the consumer. If found malicious, the consumer can inform their service provider to take the necessary action.</li>\n<li>SMS Notification: An SMS notification is sent to the consumer regarding the authentication request. This further helps in identifying a malicious request, which can be reported quickly.</li>\n<li>Multi-Factor Authentication: The consumer is asked to verify their identity through the second factor of authentication. This can be either email verification, phone verification, or a security question-based authentication.</li>\n<li>Blocking User Access: After multiple access requests, the account is blocked immediately once a specific risk criterion is met. Now the consumer needs to get in touch with the service provider to get unblocked.</li>\n<li>Security Questions: Security questions offer a way to authenticate users once they are under suspicion. Consumers need to answer certain questions to prove their identity.</li>\n</ul>\n<h2 id=\"the-biggest-advantage-of-adaptive-authentication\" style=\"position:relative;\"><a href=\"#the-biggest-advantage-of-adaptive-authentication\" aria-label=\"the biggest advantage of adaptive authentication permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>The Biggest Advantage of Adaptive Authentication</h2>\n<p>Adaptive authentication increases your conversion rates!</p>\n<p>Yes, here’s how it’s achieved.</p>\n<p>Besides the fact that adaptive authentication offers the highest level of security for both consumers and enterprises, it also ensures a frictionless authentication process for normal conditions.</p>\n<p>Yes, unlike multi-factor authentication that creates a lengthy authentication process each time a user tries to log in, adaptive authentication only kicks in whenever it finds a suspicious login attempt.</p>\n<p>This means a user won’t need to prove their identity through multiple layers of authentication in everyday scenarios. Instead, the user would only be required to go through the authentication process if the system finds any unusual activity from the user’s end or detects a risk.</p>\n<p>Must read: <a href=\"https://www.loginradius.com/blog/identity/risk-based-authentication/\">What is Risk-Based Authentication?</a></p>\n<p>When users get a flawless experience while signing in, there are more chances of conversion when compared to a login process involving an exhausting authentication process.</p>\n<h2 id=\"in-conclusion\" style=\"position:relative;\"><a href=\"#in-conclusion\" aria-label=\"in conclusion permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>In Conclusion</h2>\n<p>Adaptive authentication or adaptive multifactor authentication is the key to business success backed by enhanced security for both the consumers and enterprises.</p>\n<p><a href=\"https://www.loginradius.com/\">LoginRadius’ CIAM</a> offers a top-notch adaptive authentication solution through its “Risk-Based Authentication” mechanism.</p>\n<p>Enterprises seeking the highest level of consumer and organization data security without hampering the user experience should consider relying on LoginRadius’ cutting-edge CIAM solution.</p>\n<p>Need more help? <a href=\"https://www.loginradius.com/contact-sales2/\">Reach us</a> to know how LoginRadius’ “Adaptive Authentication” can help secure your consumer identities and business information.</p>\n<p><a href=\"https://www.loginradius.com/contact-us?utm_source=blog&#x26;utm_medium=web&#x26;utm_campaign=adaptive-authentication\"><img src=\"/8fce571f703a5970dbb1359a2fe0e51a/book-a-demo-loginradius.webp\" alt=\"book-a-demo-Consultation\"></a></p>\n<style class=\"grvsc-styles\">\n  .grvsc-container {\n    overflow: auto;\n    -webkit-overflow-scrolling: touch;\n    padding-top: 1rem;\n    padding-top: var(--grvsc-padding-top, var(--grvsc-padding-v, 1rem));\n    padding-bottom: 1rem;\n    padding-bottom: var(--grvsc-padding-bottom, var(--grvsc-padding-v, 1rem));\n    border-radius: 8px;\n    border-radius: var(--grvsc-border-radius, 8px);\n    font-feature-settings: normal;\n  }\n  \n  .grvsc-code {\n    display: inline-block;\n    min-width: 100%;\n  }\n  \n  .grvsc-line {\n    display: inline-block;\n    box-sizing: border-box;\n    width: 100%;\n    padding-left: 1.5rem;\n    padding-left: var(--grvsc-padding-left, var(--grvsc-padding-h, 1.5rem));\n    padding-right: 1.5rem;\n    padding-right: var(--grvsc-padding-right, var(--grvsc-padding-h, 1.5rem));\n  }\n  \n  .grvsc-line-highlighted {\n    background-color: var(--grvsc-line-highlighted-background-color, transparent);\n    box-shadow: inset var(--grvsc-line-highlighted-border-width, 4px) 0 0 0 var(--grvsc-line-highlighted-border-color, transparent);\n  }\n  \n</style>","frontmatter":{"date":"July 15, 2021","updated_date":null,"description":"Adaptive authentication is a game-changer for enterprises that require strong fencing to protect consumer and enterprise data. Here’s a quick read depicting the role and need for adaptive authentication instead of just multi-factor authentication.","title":"Adaptive Authentication- Is it the Next Breakthrough in Customer Authentication?","tags":["adaptive authentication","mfa","ciam solution"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.550387596899225,"src":"/static/0ad652787a6d7a6ee03e5743c0e4fe77/58556/adaptive-authentication.webp","srcSet":"/static/0ad652787a6d7a6ee03e5743c0e4fe77/61e93/adaptive-authentication.webp 200w,\n/static/0ad652787a6d7a6ee03e5743c0e4fe77/1f5c5/adaptive-authentication.webp 400w,\n/static/0ad652787a6d7a6ee03e5743c0e4fe77/58556/adaptive-authentication.webp 800w,\n/static/0ad652787a6d7a6ee03e5743c0e4fe77/99238/adaptive-authentication.webp 1200w,\n/static/0ad652787a6d7a6ee03e5743c0e4fe77/7c22d/adaptive-authentication.webp 1600w,\n/static/0ad652787a6d7a6ee03e5743c0e4fe77/25f09/adaptive-authentication.webp 1920w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Vishal Sharma","github":null,"avatar":null}}}},{"node":{"excerpt":"When was the last time you signed up to a website by filling out the entire registration form? Gone are the days where you had to fill out…","fields":{"slug":"/identity/bring-your-own-identity/"},"html":"<p>When was the last time you signed up to a website by filling out the entire registration form? Gone are the days where you had to fill out lengthy registration forms, create different usernames and passwords, and remember them every time you tried to login - awesome, right!</p>\n<p>Consumers demand a smarter experience today. They don't like to create a new ID every time they want to utilize a service. Instead, they are open to leveraging their existing digital identity securely and easily, with the opportunity to reuse it in multiple domains. </p>\n<p>And as a response to this demand, businesses have come-up with a concept called Bring Your Own Identity (BYOI).</p>\n<h2 id=\"what-is-byoi\" style=\"position:relative;\"><a href=\"#what-is-byoi\" aria-label=\"what is byoi permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>What is BYOI</h2>\n<p>The \"Bring your own\" trend started when organizations allowed their employees to bring their device - BYOD. Later, it gained popularity and paved the way for many such concepts like Bring your own apps (BYOA), Bring your own technology (BYOT), Bring your own cloud (BYOC), Bring your own encryption (BYOE), etc.</p>\n<p><strong>Bring your own identity, or BYOI is also one such trend where consumers bring in their own digital ID, which is either managed by self or by any third-party.</strong></p>\n<p>Instead of asking consumers to fill in long forms as part of the registration process, you can allow them to choose their existing <a href=\"https://www.loginradius.com/blog/identity/digital-identity-management/\">digital identity</a>. These could be any of their social media accounts such as Facebook, Twitter, Google, or LinkedIn. </p>\n<p>Moreso, with features  like simplified registration (which is both quick and secure), the BYOI trend can address the problems of organizations that are losing consumers.  </p>\n<h2 id=\"the-big-picture\" style=\"position:relative;\"><a href=\"#the-big-picture\" aria-label=\"the big picture permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>The Big Picture</h2>\n<p>With the pandemic forcing organizations to rethink their digital transformation, BYOI is a key part of securing user identities in 2021. BYOI (Bring Your Own Identity) will unlock the value in digital identities and is going to disrupt traditional methods of access in the future.</p>\n<p>Many of your consumers have an existing digital identity, and BYOI lets them use an account they already have rather than creating a new one. By allowing your consumers to log in with an existing set of credentials, you make it simple for consumers to sign up for an account with you, increasing your overall conversion rate.</p>\n<h2 id=\"identity-brokering\" style=\"position:relative;\"><a href=\"#identity-brokering\" aria-label=\"identity brokering permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Identity Brokering</h2>\n<p><a href=\"https://www.loginradius.com/identity-providers/\">Identity Brokering</a> is an approach where organizations/businesses do not require consumers to provide their credentials to authenticate. Instead, an identity broker service acts as a bridge between the Identity and Service Providers and enables the authentication process between the two.</p>\n<h3 id=\"span-stylecolor-ff4500-identity-broker-service-facilitates-byoi-by-implementing-industry-standard-protocol-oauth2-oauth-open-authentication-2-is-a-framework-that-authorizes-and-enables-applications-to-obtain-limited-access-to-a-consumers-accounts-on-an-http-service-such-as-facebook-github-or-digitalocean-span\" style=\"position:relative;\"><a href=\"#span-stylecolor-ff4500-identity-broker-service-facilitates-byoi-by-implementing-industry-standard-protocol-oauth2-oauth-open-authentication-2-is-a-framework-that-authorizes-and-enables-applications-to-obtain-limited-access-to-a-consumers-accounts-on-an-http-service-such-as-facebook-github-or-digitalocean-span\" aria-label=\"span stylecolor ff4500 identity broker service facilitates byoi by implementing industry standard protocol oauth2 oauth open authentication 2 is a framework that authorizes and enables applications to obtain limited access to a consumers accounts on an http service such as facebook github or digitalocean span permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a><span style=\"color: #FF4500\"> Identity broker service facilitates BYOI by implementing industry-standard protocol OAUTH2. OAuth (Open Authentication) 2 is a framework that authorizes and enables applications to obtain limited access to a consumer's accounts on an HTTP service such as Facebook, GitHub, or DigitalOcean. </span></h3>\n<h2 id=\"the-loginradius-advantage\" style=\"position:relative;\"><a href=\"#the-loginradius-advantage\" aria-label=\"the loginradius advantage permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>The LoginRadius Advantage</h2>\n<p>If you are the CSO or CIO of your company looking for a platform that acts as an identity broker, the <a href=\"https://www.loginradius.com/\">LoginRadius CIAM platform</a> is the perfect solution that can act as a bridge between multiple identity service providers. </p>\n<p>The possibilities are endless with the LoginRadius platform in how you can set up your login flows to best serve your consumer's needs and meet your business goals. LoginRadius can integrate with any provider, so you can give your consumers the convenience and choice while having an optimized back-end infrastructure to ensure an automated and streamlined experience for your consumers.</p>\n<p><a href=\"https://www.loginradius.com/contact-us?utm_source=blog&#x26;utm_medium=web&#x26;utm_campaign=bring-your-own-identity\"><img src=\"/8fce571f703a5970dbb1359a2fe0e51a/book-a-demo-loginradius.webp\" alt=\"book-a-demo-loginradius\"></a></p>\n<style class=\"grvsc-styles\">\n  .grvsc-container {\n    overflow: auto;\n    -webkit-overflow-scrolling: touch;\n    padding-top: 1rem;\n    padding-top: var(--grvsc-padding-top, var(--grvsc-padding-v, 1rem));\n    padding-bottom: 1rem;\n    padding-bottom: var(--grvsc-padding-bottom, var(--grvsc-padding-v, 1rem));\n    border-radius: 8px;\n    border-radius: var(--grvsc-border-radius, 8px);\n    font-feature-settings: normal;\n  }\n  \n  .grvsc-code {\n    display: inline-block;\n    min-width: 100%;\n  }\n  \n  .grvsc-line {\n    display: inline-block;\n    box-sizing: border-box;\n    width: 100%;\n    padding-left: 1.5rem;\n    padding-left: var(--grvsc-padding-left, var(--grvsc-padding-h, 1.5rem));\n    padding-right: 1.5rem;\n    padding-right: var(--grvsc-padding-right, var(--grvsc-padding-h, 1.5rem));\n  }\n  \n  .grvsc-line-highlighted {\n    background-color: var(--grvsc-line-highlighted-background-color, transparent);\n    box-shadow: inset var(--grvsc-line-highlighted-border-width, 4px) 0 0 0 var(--grvsc-line-highlighted-border-color, transparent);\n  }\n  \n</style>","frontmatter":{"date":"July 09, 2021","updated_date":null,"description":"The idea of bringing one's own identity has caught the imagination of every digital consumer. By allowing your consumers to log in with an existing set of credentials, you make it easy for them to sign up for an account with you—increasing your overall conversion rate.","title":"The Rise of BYOI (Bring your own Identity)","tags":["security"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.7857142857142858,"src":"/static/b265c3527798cce6f9c608118d9c435e/58556/bring-your-own-identity-cover.webp","srcSet":"/static/b265c3527798cce6f9c608118d9c435e/61e93/bring-your-own-identity-cover.webp 200w,\n/static/b265c3527798cce6f9c608118d9c435e/1f5c5/bring-your-own-identity-cover.webp 400w,\n/static/b265c3527798cce6f9c608118d9c435e/58556/bring-your-own-identity-cover.webp 800w,\n/static/b265c3527798cce6f9c608118d9c435e/cc834/bring-your-own-identity-cover.webp 1024w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Saikiran Babladi","github":null,"avatar":null}}}},{"node":{"excerpt":"When you visit a website, it may store some basic information about you, such as your IP address, the operating system on your computer, the…","fields":{"slug":"/identity/pii-compliance-enterprise/"},"html":"<p>When you visit a website, it may store some basic information about you, such as your IP address, the operating system on your computer, the browser you use, ISP used to connect, location, screen resolution, etc. Some websites store login cookies on your computer, so you don't have to log in every time you visit them. </p>\n<p>But this is not all. When browsing online, you also leave enough breadcrumbs for websites and web applications to identify you. </p>\n<p>We often talk about personally identifiable information (PII), but few users know precisely what it is. </p>\n<p>Besides, there are many ways to manage personal information. Having said that, it is one thing when you <a href=\"https://www.loginradius.com/blog/identity/consumer-data-privacy-security/\">protect your PII from potential exploitation</a>, and it's entirely different when a third party manages it for you. </p>\n<p>So, let us take a deep dive to discover the term personally identifiable information or PII.</p>\n<h2 id=\"what-is-personally-identifiable-information\" style=\"position:relative;\"><a href=\"#what-is-personally-identifiable-information\" aria-label=\"what is personally identifiable information permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>What is Personally Identifiable Information</h2>\n<p>Data that helps identify a specific individual is called personally identifiable information, or PII in short. For example, your social security number is a good example of** **PII Compliance because it is unique, and the number itself will lead someone to find you directly.</p>\n<p> In addition to this, your full name, driver's license ID, email address, bank account information, password, or phone number can also be considered personally identifiable information.</p>\n<p>PII has a principal role in network security, especially when it comes to data breaches and identity theft. For example, if a company that manages personal information encounters a data breach, its customers will likely suffer personal identity theft because the company-managed data will be stolen.</p>\n<p><a href=\"https://www.loginradius.com/resource/pii-data-breach-report/\"><img src=\"/c673b27f12f7cefcfd503ad7676ff0a2/RP-Protecting-PII-Against-Data-Breaches.webp\" alt=\"RP-Protecting-PII-Against-Data-Breaches\"></a></p>\n<p>The information related to this is stored with online marketers and brokers who trade your data to various companies that \"want to show you appropriate ads\" and provide you with an \"improved user experience.\"</p>\n<h3 id=\"key-takeaways\" style=\"position:relative;\"><a href=\"#key-takeaways\" aria-label=\"key takeaways permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Key takeaways</h3>\n<ul>\n<li>Personally identifiable information (PII) can identify a person when used alone or with other relevant data.</li>\n<li>Confidential identifying information can include your full name, social security number, driver's license, financial information, and medical records.</li>\n<li>Non-confidential personally identifiable information is easily accessible from public sources and may include your zip code, race, gender, and date of birth.</li>\n</ul>\n<h2 id=\"importance-of-pii-compliance\" style=\"position:relative;\"><a href=\"#importance-of-pii-compliance\" aria-label=\"importance of pii compliance permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Importance of PII Compliance</h2>\n<p>Advanced technology platforms have changed the way companies operate, government legislation, and personal contact. With the help of digital tools such as mobile phones, the Internet, e-commerce, and social media, the supply of all kinds of data has surged.</p>\n<p>Such data is collected, analyzed, and processed by enterprises and shared with other companies. The large amount of information enables companies to gain insights into how to better interact with customers.</p>\n<p>However, the emergence of big data has also increased the number of data breaches and cyberattacks by entities that realize the value of this information. As a result, people are concerned about how companies handle sensitive information about their customers. Regulators are seeking new laws to protect consumer data, and users are looking for more anonymous ways to stay digital.</p>\n<h2 id=\"protection-of-personally-identifiable-information\" style=\"position:relative;\"><a href=\"#protection-of-personally-identifiable-information\" aria-label=\"protection of personally identifiable information permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Protection of Personally Identifiable Information</h2>\n<p>Many countries/regions have adopted multiple data protection laws like the GDPR, CCPA to create guidelines for companies collecting, storing, and sharing customers' personal information. Some basic principles outlined in these laws stipulate that certain sensitive information should not be collected except in extreme circumstances.</p>\n<p>In addition, the regulatory guidelines also stipulate that if the data is no longer needed for its intended purpose, it should be deleted, and personal information should not be shared with sources whose protection cannot be guaranteed. Moreover, supervision and protection of personally identifiable information may become a significant issue for individuals, companies, and governments in the coming years.</p>\n<h3 id=\"selling-the-stolen-data\" style=\"position:relative;\"><a href=\"#selling-the-stolen-data\" aria-label=\"selling the stolen data permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Selling the stolen data</h3>\n<p>Cybercriminals compromise data systems to access PII and then sell it to buyers willing to buy in the underground digital market. For example, the <a href=\"https://www.usatoday.com/story/tech/2015/05/26/irs-breach-100000-accounts-get-transcript/27980049/\">Internal Revenue Service (IRS) in the US suffered a data breach</a> that resulted in the theft of the personally identifiable information of more than 100,000 taxpayers. Criminals used quasi-information stolen from multiple sources to access the IRS website application by answering personal verification questions that should belong only to taxpayers.</p>\n<h3 id=\"adopting-pii-compliance\" style=\"position:relative;\"><a href=\"#adopting-pii-compliance\" aria-label=\"adopting pii compliance permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Adopting PII compliance</h3>\n<p>Without considering the type or size of any company, all organizations must have some detailed and <a href=\"https://www.loginradius.com/blog/identity/privacy-compliance/\">comprehensive knowledge of PII compliance</a> it collects and how it can be utilized. The companies must have legal knowledge about which among the various country and state regulations related to PII is applied to some specific situation related to them. Also, it is important to consider that adopting acceptable use of privacy policies associated with this particular data can be advantageous.</p>\n<h2 id=\"conclusion\" style=\"position:relative;\"><a href=\"#conclusion\" aria-label=\"conclusion permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Conclusion</h2>\n<p>The security of personal identity and other details is at increasing risk today, with hackers finding new ways to hack into websites. Therefore, enterprises of all sizes must maintain PII compliance to protect the information of the company and its users. With PII compliance, businesses can maintain<a href=\"https://www.loginradius.com/blog/identity/data-security-best-practices/\"> improved data security</a>. </p>\n<p><a href=\"https://www.loginradius.com/contact-us?utm_source=blog&#x26;utm_medium=web&#x26;utm_campaign=pii-compliance-enterprise\"><img src=\"/8fce571f703a5970dbb1359a2fe0e51a/book-a-demo-loginradius.webp\" alt=\"book-a-demo-loginradius\"></a></p>\n<style class=\"grvsc-styles\">\n  .grvsc-container {\n    overflow: auto;\n    -webkit-overflow-scrolling: touch;\n    padding-top: 1rem;\n    padding-top: var(--grvsc-padding-top, var(--grvsc-padding-v, 1rem));\n    padding-bottom: 1rem;\n    padding-bottom: var(--grvsc-padding-bottom, var(--grvsc-padding-v, 1rem));\n    border-radius: 8px;\n    border-radius: var(--grvsc-border-radius, 8px);\n    font-feature-settings: normal;\n  }\n  \n  .grvsc-code {\n    display: inline-block;\n    min-width: 100%;\n  }\n  \n  .grvsc-line {\n    display: inline-block;\n    box-sizing: border-box;\n    width: 100%;\n    padding-left: 1.5rem;\n    padding-left: var(--grvsc-padding-left, var(--grvsc-padding-h, 1.5rem));\n    padding-right: 1.5rem;\n    padding-right: var(--grvsc-padding-right, var(--grvsc-padding-h, 1.5rem));\n  }\n  \n  .grvsc-line-highlighted {\n    background-color: var(--grvsc-line-highlighted-background-color, transparent);\n    box-shadow: inset var(--grvsc-line-highlighted-border-width, 4px) 0 0 0 var(--grvsc-line-highlighted-border-color, transparent);\n  }\n  \n</style>","frontmatter":{"date":"July 07, 2021","updated_date":null,"description":"The security of personal identity and other details is at increasing risk today, with hackers finding new ways to hack into websites. Therefore, enterprises of all sizes must maintain PII compliance to protect the information of the company and its users.","title":"Understanding PII Compliance: A Key to Enterprise Data Security","tags":["data security","enterprise security","compliance"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.9801980198019802,"src":"/static/1e7c50faa060dbd2b27e2e85221eb577/58556/pii-compliance-enterprise-cover.webp","srcSet":"/static/1e7c50faa060dbd2b27e2e85221eb577/61e93/pii-compliance-enterprise-cover.webp 200w,\n/static/1e7c50faa060dbd2b27e2e85221eb577/1f5c5/pii-compliance-enterprise-cover.webp 400w,\n/static/1e7c50faa060dbd2b27e2e85221eb577/58556/pii-compliance-enterprise-cover.webp 800w,\n/static/1e7c50faa060dbd2b27e2e85221eb577/cc834/pii-compliance-enterprise-cover.webp 1024w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Rakesh Soni","github":"oyesoni","avatar":"rakesh-soni.webp"}}}}]},"markdownRemark":{"excerpt":"Identity is evolving, and developers are at the forefront of this transformation. Every day brings a new learning—adapting to new standards…","fields":{"slug":"/identity/developer-first-identity-provider-loginradius/"},"html":"<p>Identity is evolving, and developers are at the forefront of this transformation. Every day brings a new learning—adapting to new standards and refining approaches to building secure, seamless experiences.</p>\n<p>We’re here to support developers on that journey. We know how important simplicity, efficiency, and well-structured documentation are when working with identity and access management solutions. That’s why we’ve redesigned the <a href=\"https://www.loginradius.com/\">LoginRadius website</a>—to be faster, more intuitive, and developer-first in every way.</p>\n<p>The goal? Having them spend less time searching and more time building.</p>\n<h2 id=\"whats-new-and-improved-on-the-loginradius-website\" style=\"position:relative;\"><a href=\"#whats-new-and-improved-on-the-loginradius-website\" aria-label=\"whats new and improved on the loginradius website permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>What’s New and Improved on the LoginRadius Website?</h2>\n<p>LoginRadius’ vision is to give developers a product that simplifies identity management so they can focus on building, deploying, and scaling their applications. To enhance this experience, we’ve spent the last few months redesigning our interface— making navigation more intuitive and reassuring that essential resources are easily accessible.</p>\n<p>Here’s a closer look at what’s new and why it’s important:</p>\n<h3 id=\"a-developer-friendly-dark-theme\" style=\"position:relative;\"><a href=\"#a-developer-friendly-dark-theme\" aria-label=\"a developer friendly dark theme permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>A Developer-Friendly Dark Theme</h3>\n<p><img src=\"/f46881583c7518a93bb24e94c32320de/a-developer-friendly-dark-theme.webp\" alt=\"This image shows how LoginRadius offers several authentication methods like traditional login, social login, passwordless login, passkeys and more in a dark mode.\">    </p>\n<p>Developers spend long hours working in dark-themed IDEs and terminals, so we’ve designed the LoginRadius experience to be developer-friendly and align with that preference.</p>\n<p>The new dark mode reduces eye strain, enhances readability, and provides a seamless transition between a coding environment and our platform. Our new design features a clean, modern aesthetic with a consistent color scheme and Barlow typography, ensuring better readability. High-quality graphics and icons are thoughtfully placed to enhance the content without adding visual clutter.</p>\n<p>So, whether you’re navigating our API docs or configuring authentication into your system, our improved interface will make those extended development hours more comfortable and efficient.</p>\n<h3 id=\"clear-categorization-for-loginradius-capabilities\" style=\"position:relative;\"><a href=\"#clear-categorization-for-loginradius-capabilities\" aria-label=\"clear categorization for loginradius capabilities permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Clear Categorization for LoginRadius Capabilities</h3>\n<p><img src=\"/e5358b82be414940f3fb146013845933/capabilities.webp\" alt=\"This image shows a breakdown of all the LoginRadius CIAM capabilities, including authentication, security, UX, scalability and multi-brand management.\"></p>\n<p>We’ve restructured our website to provide a straightforward breakdown of our customer identity and access management platform capabilities, helping you quickly find what you need:</p>\n<ul>\n<li>Authentication: Easily understand <a href=\"https://www.loginradius.com/blog/identity/authentication-option-for-your-product/\">how to choose the right login method</a>, from traditional passwords and OTPs to social login, federated SSO, and passkeys with few lines of code.</li>\n<li>Security: Implement no-code security features like bot detection, IP throttling, breached password alerts, DDoS protection, and adaptive MFA to safeguard user accounts.</li>\n<li>User Experience: Leverage AI builder, hosted pages, and drag-and-drop workflows to create smooth, branded sign-up and login experiences.</li>\n<li>High Performance &#x26; Scalability: Confidently scale with sub-100ms API response times, 100% uptime, 240K+ RPS, and 28+ global data center regions.</li>\n<li>Multi-Brand Management: Efficiently manage multiple identity apps, choosing isolated or shared data stores based on your brand’s unique needs.</li>\n</ul>\n<p>This structured layout ensures you can quickly understand each capability and how it integrates into your identity ecosystem.</p>\n<h3 id=\"developer-first-navigation\" style=\"position:relative;\"><a href=\"#developer-first-navigation\" aria-label=\"developer first navigation permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Developer-First Navigation</h3>\n<p><img src=\"/a8c155c2b6faf3d5f4b4de4e2b14d763/developers-menu.webp\" alt=\"This image shows the LoginRadius menu bar, highlighting the developer dropdown.\">   </p>\n<p>We’ve been analyzing developer workflows to identify how you access key resources. That’s why we redesigned our navigation with one goal in mind: to reduce clicks and make essential resources readily available.</p>\n<p>The new LoginRadius structure puts APIs, SDKs, and integration guides right at the menu bar under the Developers dropdown so you can get started faster. Our Products, Solutions, and Customer Services are also clearly categorized, helping development teams quickly find the right tools and make informed decisions.</p>\n<h3 id=\"quick-understanding-of-integration-benefits\" style=\"position:relative;\"><a href=\"#quick-understanding-of-integration-benefits\" aria-label=\"quick understanding of integration benefits permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Quick Understanding of Integration Benefits</h3>\n<p><img src=\"/b2f9a964a2da0ea83e2f8596b833bba7/we-support-your-tech-stack.webp\" alt=\"This image shows a list of popular programming languages and frameworks offered by LoginRadius.\"></p>\n<p>Developers now have a clear view of the tech stack available with LoginRadius, designed to support diverse business needs.</p>\n<p>Our platform offers pre-built SDKs for Node.js, Python, Java, and more, making CIAM integration seamless across popular programming languages and frameworks.</p>\n<h2 id=\"over-to-you-now\" style=\"position:relative;\"><a href=\"#over-to-you-now\" aria-label=\"over to you now permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Over to You Now!</h2>\n<p>Check out our <a href=\"https://www.loginradius.com/\">revamped LoginRadius website</a> and see how the improved experience makes it easier to build, scale, and secure your applications.</p>\n<p>Do not forget to explore the improved navigation and API documentation, and get started with our free trial today. We’re excited to see what you’ll build with LoginRadius!</p>\n<style class=\"grvsc-styles\">\n  .grvsc-container {\n    overflow: auto;\n    -webkit-overflow-scrolling: touch;\n    padding-top: 1rem;\n    padding-top: var(--grvsc-padding-top, var(--grvsc-padding-v, 1rem));\n    padding-bottom: 1rem;\n    padding-bottom: var(--grvsc-padding-bottom, var(--grvsc-padding-v, 1rem));\n    border-radius: 8px;\n    border-radius: var(--grvsc-border-radius, 8px);\n    font-feature-settings: normal;\n  }\n  \n  .grvsc-code {\n    display: inline-block;\n    min-width: 100%;\n  }\n  \n  .grvsc-line {\n    display: inline-block;\n    box-sizing: border-box;\n    width: 100%;\n    padding-left: 1.5rem;\n    padding-left: var(--grvsc-padding-left, var(--grvsc-padding-h, 1.5rem));\n    padding-right: 1.5rem;\n    padding-right: var(--grvsc-padding-right, var(--grvsc-padding-h, 1.5rem));\n  }\n  \n  .grvsc-line-highlighted {\n    background-color: var(--grvsc-line-highlighted-background-color, transparent);\n    box-shadow: inset var(--grvsc-line-highlighted-border-width, 4px) 0 0 0 var(--grvsc-line-highlighted-border-color, transparent);\n  }\n  \n</style>","frontmatter":{"date":"February 21, 2025","updated_date":null,"description":"LoginRadius’ vision is to give developers a product that simplifies identity management so they can focus on building, deploying, and scaling their applications. To enhance this experience, we’ve redesigned our website interface, making navigation more intuitive and reassuring that essential resources are easily accessible.","title":"Revamped & Ready: Introducing the New Developer-First LoginRadius Website","tags":["Developer tools","API","Identity Management","User Authentication"],"pinned":true,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.7857142857142858,"src":"/static/80b4e4fbe176a10a327d273504607f32/58556/hero-section.webp","srcSet":"/static/80b4e4fbe176a10a327d273504607f32/61e93/hero-section.webp 200w,\n/static/80b4e4fbe176a10a327d273504607f32/1f5c5/hero-section.webp 400w,\n/static/80b4e4fbe176a10a327d273504607f32/58556/hero-section.webp 800w,\n/static/80b4e4fbe176a10a327d273504607f32/99238/hero-section.webp 1200w,\n/static/80b4e4fbe176a10a327d273504607f32/7c22d/hero-section.webp 1600w,\n/static/80b4e4fbe176a10a327d273504607f32/1258b/hero-section.webp 2732w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Rakesh Soni","github":"oyesoni","avatar":"rakesh-soni.webp"}}}},"pageContext":{"limit":6,"skip":246,"currentPage":42,"type":"//identity//","numPages":72,"pinned":"ee8a4479-3471-53b1-bf62-d0d8dc3faaeb"}},"staticQueryHashes":["1171199041","1384082988","2100481360","23180105","528864852"]}