Definition
Passwordless authentication eliminates the need for traditional passwords by using alternative methods to verify a user's identity. This approach enhances security by removing a common attack vector and simplifies the user experience. Instead of typing a password, users might authenticate using biometrics like fingerprints or facial recognition, a security key, or a one-time code sent to a trusted device. Implementing passwordless solutions significantly reduces the risk of credential stuffing attacks and phishing. For instance, many banking apps allow you to log in using your fingerprint instead of a username and password. This differs from multi-factor authentication where a password may still be one of the required factors. You will encounter passwordless authentication concepts on CompTIA Security+ and CySA+ exams.