Passwords are so portable and easy to use...as long as you dont change them...that's why attackers love them too. I do think it adds a whole new hassle to change mobile phone ecosystems. I do think users will have multiple ecosystems, perhaps one determined for work and one for consumer/personal

I don't think there is vendor lockin for consuming passkeys or do you mean orgs that purchase their mobile devices to use them?

That lego market can be fierce

I think there will be some perception challenges of using personal phones for "work" stuff. I often hear "inform the end user we can't see their stuff, but they don't trust us if we say it" adms an anecdote for using things like Authenticator app on personal phones.

I think there will be a period of confusion that will take some time to adapt to, but like I said because consumer and enterprise are happening around the same time I hope it is easier transition for users

So for enterprise space, it will help drive the March to passwordless by wanting your apps and services to be able to take advantage of passkeys. IE to get the true security benefits you have to USE them and not just have them to use sometimes while still supporting weak methods using passwords

I do have reservations about the ecosystems since I can see people registering passkeys in 1 ecosystem, buying a new phone in different ecosyatem, trading in old phone and now realizing they may not be able to easily register new keys for services they use.

I do think organizations will have reservations of accepting passkeys which are not device bound because by design the consumer ecosystems benefits from syncing and sharing them. So solutions that layer more security features on them will rise.

I am optimistic because we are seeing this transition to promote passkeys in the consumer AND enterprise space at the same time, so I think it will feel less unnatural for many if you are using them for your social media and your work accounts.

Fellow nerds! My org is hiring. We're looking for a principal engineer that is interested in the architecting of security things. jobs.careers.microsoft.com/global/en/jo...