X

13 technologies that are safer than passwords

Vein scans, eye scans, fingerprint scans and more up the security game
By Joal Ryan, Contributor
saferthanpasswordsfingerprint-1.jpg
1 of 20 Getty Images/iStockphoto

Fingerprint sensor

As we've learned over and over again, passwords are failing us. But maybe the fingerprint can save us.

"Fingerprint sensors are the most widely adopted of all biometric technologies," says Jason Chaikin, president of the biometric authentication developer Vkansee.

They're easy to use, and difficult (though not impossible) to fool. The technology, common on smartphones, reads your digit's unique pattern of ridges.

saferthanpasswordsfingerprint-2.jpg
2 of 20 CNET

Not much room for error

Apple says the probability of two different fingerprints registering as the same fingerprint on one of its devices with Touch ID is "1 in 50,000."

"By comparison," the company notes, "the odds of guessing a typical 4-digit passcode are 1 in 10,000."

saferthanpasswordsearbuds.jpg
3 of 20 NEC

​Otoacoustic authentication

Now in the prototype stage, and expected on the commercial market in 2018, NEC's wearable, earbud-esque device aims to best passwords with technology that emits a signal and then identifies the user by the resulting "sounds emitted by the inner ear."

saferthanpasswordsfacialrecognition-1.jpg
4 of 20 Igor Stevanovic, Getty Images/iStockphoto

Facial recognition

A Scientific American columnist called face-reading scanners his favorite alternative to the old "123456."

It's "secure, effortless and available now," David Progue wrote in 2016.

saferthanpasswordsfacialrecognition-2.jpg
5 of 20 Matt Elliott/CNET

Tough to fool

The biometric system that inspired Scientific American's praise was Windows Hello, which allows properly equipped Windows 10 users to log in with fingerprints, iris scans -- or face scans.

"You can't fool [the face scan] with a photograph, a 3-D model of your head or even an identical twin," Progue wrote.

shutterstock588739970.jpg
6 of 20 Shutterstock/Nik Bruining

Iris scanner

A leading manufacturer of the technology calls the iris scan "the most accurate human identifier other than DNA." The false-accept rate, according to EyeLock, is "1-in-1.5 million for a single eye."

Rumor has it the forthcoming iPhone 8 will feature an iris scanner. Other smartphones, including the notorious Samsung Galaxy Note 7, already have.

shutterstock564718000.jpg
7 of 20 Shutterstock / Vladimir Zhoga

Finger-vein recognition

This infrared technology can confirm "liveness," as Vkansee's Chaikin puts it.

"[It] allows moving blood and other things that can only happen on a living person to be recognized," he says.

saferthanpasswordsfingerveinreader-2.jpg
8 of 20 Hitachi via YouTube

Finger-vein focused: Hitachi

"Hitachi has most of the technology for finger-vein recognition," Chaikin says.

The company's scanners are widely used by banks, especially in Japan.

voice recognition
9 of 20 Getty Images/iStockphoto

Voice recognition

Barclays is so bullish on this technology that the bank has pulled the plug on passwords and security questions in favor of voice recognition for its phone-using personal-banking customers.

saferthanpasswordsvoicerecognition-2.jpg
10 of 20 Getty Images

More unique than you think

" ... [U]nlike a password," Steven Cooper, CEO of Personal Banking at Barclays, said at the system launch, "each person's voice is as unique as a fingerprint."

Barclays said its technology would identify the customer "from the first few words that are spoken."

saferthanpasswordsonetimeusetoken.jpg
11 of 20 Yevgen Romanenko, Getty Images/iStockphoto

One-time passwords

Either in physical or software form, this tech generates random passwords that, as billed, may only be used once. It's a more-secure alternative to the static password -- i.e., the one you create, perhaps scribble down and proceed to key in for months, if not years, on end.

saferthanpasswordsonetimetoken-2.jpg
12 of 20 Photographer:

Use with passwords

Chaikin of Vkansee warns that the one-time password is "just one layer of a larger security system."

"When a one-time-use token, such as a one-time-use password, is added on top of a password and login, it helps with multiple-layer authentication," Chaikin says.

saferthanpasswordspin.jpg
13 of 20 Microsoft

​Windows 10 PINs

You can still log in to a Windows 10 device with a password, but Microsoft requires a PIN to access Windows Hello, because, as it argues at length, the PIN is flat-out "better."

One reason: "... [T]he PIN is tied to the specific device on which it was set up," Microsoft says. "That PIN is useless to anyone without that specific hardware."

saferthanpasswordspassphrase.jpg
14 of 20 Getty Images/iStockphoto

Passphrases

Passphrases tend to be longer than passwords -- and that's why they're safer. More words, more characters and more spaces mean hackers must spend more time doing their dirty work.

"I can't stress enough the importance of having length paired with complexity," wrote the software-test engineer behind the blog Crambler.

saferthanpasswordsmultistep.jpg
15 of 20 Getty Images/iStockphoto

Multi-step authentication

If a long passphrase offers more security than a short password -- and it does -- then it follows that a two- or even three-step authentication process trumps a one-step.

In practice, this means that when you log in to an account, you are expected to provide not only a password (something you know), but also perhaps a one-time password (something you have) or a fingerprint (something you are) -- and maybe both.

saferthanpasswordsbehaviorrecognition.jpg
16 of 20 Getty Images

Behavior recognition

Dubbed a password-killer, this technology IDs you by the way you use, interact with or even hold your smartphone.

"We can even measure air pressure using the barometer on the latest smartphones, which can give us another indication of where the phone is and whether that corresponds to where the user says he is," Zia Hayat, chief executive of Callsign, told the BBC.

Banks, including Deutsche, have given the technology trial runs.

saferthanpasswordspalmreading-1.jpg
17 of 20 Getty Images/iStockphoto

Palm scans

As with finger-vein recognition, palm scans analyze vein patterns via infrared technology. They've been enlisted not only by the banking industry, but also hospitals.

"Palm scanning is 100 percent more accurate than fingerprints," Nader Mherabi, chief information officer at NYU Langone Medical Center in New York, said to CBS News.

saferthanpasswordspalmreading-2.jpg
18 of 20 Fujitsu via YouTube

Would you use one on your laptop?

The Japanese tech company Fujitsu's PalmSecure has been used to safeguard ATM transactions, and even laptops, where a hovering hand over the scanner is all the system needs to authorize a log in.

saferthanpasswordsearid.jpg
19 of 20 Descartes Biometrics via Facebook

​Ear identification

Eyeballs and veins aren't the only unique body parts we've got. Your ears are one of a kind, too, so to speak.

saferthanpasswordsearid-2.jpg
20 of 20 Siam Mobile via Facebook

Your ears are unique

The dual-screen Siam 7X smartphone made a splash in part by deploying technology that "utilizes a device's camera to authenticate or identify a user from their unique ear features."

Related Galleries

Holiday wallpaper for your phone: Christmas, Hanukkah, New Year's, and winter scenes
Holiday lights in Central Park background

Related Galleries

Holiday wallpaper for your phone: Christmas, Hanukkah, New Year's, and winter scenes

21 Photos
Winter backgrounds for your next virtual meeting
Wooden lodge in pine forest with heavy snow reflection on Lake O'hara at Yoho national park

Related Galleries

Winter backgrounds for your next virtual meeting

21 Photos
Holiday backgrounds for Zoom: Christmas cheer, New Year's Eve, Hanukkah and winter scenes
3D Rendering Christmas interior

Related Galleries

Holiday backgrounds for Zoom: Christmas cheer, New Year's Eve, Hanukkah and winter scenes

21 Photos
Hyundai Ioniq 5 and Kia EV6: Electric vehicle extravaganza
img-8825

Related Galleries

Hyundai Ioniq 5 and Kia EV6: Electric vehicle extravaganza

26 Photos
A weekend with Google's Chrome OS Flex
img-9792-2

Related Galleries

A weekend with Google's Chrome OS Flex

22 Photos
Cybersecurity flaws, customer experiences, smartphone losses, and more: ZDNet's research roundup
shutterstock-1024665187.jpg

Related Galleries

Cybersecurity flaws, customer experiences, smartphone losses, and more: ZDNet's research roundup

8 Photos
Inside a fake $20 '16TB external M.2 SSD'
Full of promises!

Related Galleries

Inside a fake $20 '16TB external M.2 SSD'

8 Photos