Enterprise Struggles and Trends in Customer Authentication Security

Organizations continue to rely heavily on passwords for customer authentication, despite widespread recognition that these methods are both insecure and detrimental to user experience. Research from Descope highlights a persistent gap between security leaders’ stated priorities and the authentication technologies actually deployed, with 87% of organizations still using passwords as a primary method. While most companies claim to use multi-factor authentication (MFA), coverage is inconsistent, leaving exploitable gaps for attackers. The transition to more secure options like passkeys is hindered by technical debt, resource constraints, and internal misalignment, even as over 70% of organizations plan to adopt such technologies.

Industry experts and practitioners are debating whether passwordless authentication is ready for widespread adoption or if it simply introduces new challenges. The evolution of identity management now includes managing non-human identities, implementing privilege access management, and adopting risk-based authentication. Security leaders are urged to align MFA, governance, and zero trust principles to resist account takeover and policy drift, but practical barriers remain in rolling out modern authentication at scale. The consensus is clear: while the future of authentication is moving beyond passwords, organizations face significant hurdles in making this transition both secure and user-friendly.