Survey finds frontline workers bypass MFA and share logins
Original title: Your frontline workers have a workaround for that MFA prompt
Of 700 decision-makers, 95% saw login workarounds and 28% confirmed account-recovery abuse attempts.
IT and security leaders at organizations with 500 or more employees in the US, UK, France and Germany said healthcare and manufacturing workers stay signed in, share credentials and try to bypass MFA. They estimated 37% of frontline workers hit an authentication problem in a typical month and lose about 2.5 hours each. Confirmed unauthorized recovery, reset or unlock attempts hit 28% of organizations, while 62% reported confirmed or suspected attempts. Passkeys are used at 28%, and 45% of those organizations still keep a password.
Unconfirmed: The 62% recovery figure mixes confirmed cases with suspicions; confirmed cases alone are 28%.
- Sapio Research surveyed 700 decision-makers in August.
- No single recovery identity check is used by a majority.
- 48% are very or extremely concerned about AI-enabled impersonation.
- Mixed login setups reported credential sharing at twice the rate.
- 60% reported a confirmed or suspected service-desk social-engineering attempt.
- Organizations
- Sapio ResearchFIDO Alliance
From the original article
3 min read at helpnetsecurity.com
Frontline workers in healthcare and manufacturing are getting around slow, unreliable logins by staying signed in, sharing credentials and trying to bypass multifactor authentication. Sapio Research surveyed 700 IT and security decision-makers in August, and 95% said they had seen frontline workers use workarounds like these in the past 12 months.
By Anamarija Pogorelec · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.