Details
What is Passwordless Authentication with Okta FastPass?
Okta FastPass is a feature of Okta Verify that allows for Passwordless Authentication in some scenarios. When available, FastPass can leverage your device's built-in security mechanisms (fingerprint reader, facial recognition, or PIN) to verify your identity instead of your password. Because you do not have to type a password, this authentication is often called "passwordless" authentication.
Is Passwordless Authentication secure?
Yes, and it improves security in multiple ways:
- Biometrics are unique to you, so they are harder to hack than passwords, which have the potential to be guessed or shared.
- PIN numbers are unique to your device, meaning that they are useless without physical access to your device.
What about privacy?
FastPass ensures your privacy and protects your biometric and/or PIN information by using authentication methods that are built in to your device. Your biometric data and/or PIN are encrypted on your device and are not shared with (transmitted to) other JMU systems or Okta.
How do I get FastPass?
FastPass is a function of Okta Verify. If you are a JMU employee with a JMU-owned and managed computer, Okta Verify is installed on your device automatically (note, Verify is not available on some shared-use devices, e.g. kiosks, lab/lectern computers, etc.). Okta Verify must also be configured as a security method in your Okta account, so the first time you attempt to use Okta FastPass on your device, Okta Verify will begin the configuration process. On a personal device, Okta will alow you to download Verify the first time you attempt to use FastPass.
Related articles:
- How to set up Okta FastPass on a JMU-Owned Computer
- How to set up Okta FastPass on a Personal Computer
Are there any requirements for Passwordless Authentication?
Passwordless authentication may not be available for every JMU system and on every device. Also, while not a requirement, to get true passwordless authentication and the greatest benefit from FastPass, you need a device capable of reading your fingerprint or recognizing your face. If your device does not have a built-in fingerprint reader or a camera that can meet this requirement, you can install one that connects via USB.