The Secure Sign-in Trends Report 2023
We analyzed billions of monthly authentications from countries around the world, and across organizations of all sizes, to learn how users authenticate today.*
Our analysis shows that organizations are making headway, and sign-ins are steadily getting more secure. But there’s still work to be done.
Here’s a look at what we learned …
Security vs. user experience is a false choice
It’s widely assumed that more secure authentication comes at a cost: the user experience. Our analysis shows that’s simply not true. Okta FastPass and FIDO2 WebAuthn earn top marks in security and usability, proving that you really can have it all.
“At Okta, we've undertaken our own journey to passwordless, phishing-resistant authentication. The benefits have been borne out in multiple failed attacks that have been directed at our own organization.”
David Bradbury
Chief Security Officer
Okta
MFA adoption continues to climb
As of January 2023, nearly two-thirds of users authenticated with MFA. That number is even higher for administrators.
64%
of users authenticate with MFA
90%
of administrators use MFA
MFA authentication has steadily gained traction, largely due to its critical role in mitigating cybersecurity risks. External forces, such as the COVID-19 pandemic and highly publicized cyberattacks, also helped to drive adoption.
Phishing-resistant authenticators show promising growth
While less than 4% of workforce users have adopted phishing-resistant authenticators, such as Okta FastPass and FIDO2 WebAuthn, the tide is turning: Over half of the overall growth in MFA adoption can be attributed to phishing-resistant options.
MFA adoption rates vary widely by industry
Highly regulated industries, including government, healthcare, financial services, and energy, lag behind other sectors for MFA adoption, while tech leads the way at 87%.
Eager for more research and insights
Visit our new thought leadership content hub.
*This report focuses exclusively on Okta Workforce Identity Cloud data and workforce use cases. It does not include Okta Customer Identity Cloud data.