Category Archives: Passwordless

Windows Hello Enhanced Sign in Security: The Hidden Layer That Makes Passwordless Truly Secure

Passwordless authentication is becoming the new standard for modern identity security.

Windows Hello for Business already replaces passwords with biometrics and PINs  but convenience alone doesn’t guarantee strong protection against credential theft.

This is where Windows Hello Enhanced Sign in Security (ESS) comes in.

ESS is a hardened, hardware backed mode of Windows Hello that ensures your authentication keys are protected inside the device’s secure enclave.

Even if malware is running, even if attackers gain local access, ESS prevents credential extraction and replay attacks.

What ESS Actually Does ?

ESS enforces:

  • TPM backed asymmetric keys
  • Hardware based isolation
  • Secure key release
  • Anti spoofing protections
  • Replay and credential theft resistance
Continue reading

Azure AD – End user FIDO Security key sign-in and experience

Since I’ve been doing vlogs in my Youtube Channel for the past 10 months, it’s been a while since I last blogged. Today, I made the decision to blog about the procedures for using the Office 365 Apps’ password-free FIDO secure sign-in.

Today we will take a look at how to setup the Passwordless sign-in via FIDO Key from the end user perspective.

In this example we are going to use Fietian FIDO2 certified key in this demo. You can take a look at their products from their website

You can also take a look at the available FIDO key security providers and Fietian is one of them in the Microsoft Docs website

Continue reading

Extending passwordless authentication to OnPremise Applications via Azure

This video explains about how to utilize FIDO key in your environment for passwordless authentication and steps to extend this passwordless functionality to onpremise environment by using Azure AD We have used Yubico FIDO key for this Demo.

Hope you enjoyed this video !!

Sathish Veerapandian

Azure AD – Getting started with Passwordless Authentication

For enterprises that use passwords today banned password list, block reused passwords, stop predictable passwords with strong MFA are the security measures and enforcements. However when you have a shared PC environment for few business cases password less authentication mechanism via FIDO keys provides a better security to the IT Infrastructure. Passwordless authentication methods are more convenient because the password is removed and can be replaced with biometrics.

This video focuses on enabling security key based passwordless authentication and seeing the example via Microsoft Authenticator.

Hope you enjoyed this video !