Abstract
With technology increasingly embedded in everyday life, the demand for secure and usable authentication methods has never been greater. Traditional password-based systems continue to dominate, despite well-known usability and security challenges. This paper explores the evolution of user authentication technologies, from secret knowledge and tokens to biometrics and emerging approaches such as Passkeys. It critically evaluates the extent to which usability has been achieved, identifying both successes—such as biometrics integrated into smartphones—and persistent issues, including inconsistent guidance, ecosystem dependence, and accessibility barriers. Drawing on academic and commercial developments, the discussion highlights the growing burden on users who must authenticate across multiple devices and services daily. Future directions including transparent, continuous, and user-choice-driven authentication are discussed as potential solutions to mitigate this burden. Ultimately, it argues that while progress has been made, current solutions remain fragmented and often exclude key user groups. A more inclusive, consistent, and user-centred approach is essential to ensure authentication systems are both secure and truly usable in practice.
| Original language | English |
|---|---|
| Article number | 104823 |
| Journal | Computers and Security |
| Volume | 162 |
| Early online date | 30 Dec 2025 |
| DOIs | |
| Publication status | Published - Mar 2026 |
ASJC Scopus subject areas
- General Computer Science
- Law
Keywords
- Authentication
- Biometric
- Passkeys
- Passwords
- Security awareness, security culture
- Tokens
Fingerprint
Dive into the research topics of 'Usable authentication: Are we there yet?'. Together they form a unique fingerprint.Cite this
- APA
- Author
- BIBTEX
- Harvard
- Standard
- RIS
- Vancouver