Elektrine lite

← Feed

@clickhere@mastodon.ie

2026-06-15 20:03 UTC

Someone mentioned in passing during a meeting in work today that "going passwordless is inevitable" and that using biometrics and facial scanning to sign in to accounts will be necessary. I work in the data protection office (the GDPR kind), so I'm begging please someone tell me this is not true.. 😩 #GDPR #DataProtection #biometrics #InfoSec

Replies (4)

  • @Tarbh@mastodon.ie 2026-06-15 20:06

    @clickhere@mastodon.ie Using a fingerprint or my face to open stuff is dead handy. I will do it for my own phone, and apps thereon. Where I have decided that's ok. Would I use it for accessing my work computer? (And I work in the IT department!) Or accessing government services? Hell no!

    Open ##5118381

  • @lluad@mastodon.ie 2026-06-15 20:09

    @clickhere@mastodon.ie I’m assuming they mean passkeys / webauthn with biometric access to their vault… and there are a lot of folks who’d like to make that necessary.

    Open ##5118383

  • @waider@mastodon.ie 2026-06-15 20:20

    @clickhere@mastodon.ie there are login systems that do not rely on passwords that do not involve biometrics, but if the government is all about pushing biometrics, then that's what people are going to sell. (Login tokens such as Yubikey are an example of a "passwordless" system; they typically use a PIN plus a physical device. A PIN is, from some angle, a password, but is somehow not considered one in this context.)

    Open ##5118385

  • @woe2you@beige.party 2026-06-15 22:33

    @clickhere@mastodon.ie Fuck, I hope not. Biometrics are identification, not authorisation. Username, not password.

    Open ##5118408