\n
![](\"https:\/\/i0.wp.com\/www.rsoftsolution.com\/blog\/wp-content\/plugins\/RSSPoster_PRO\/cache\/cd790_password-log-book-2.jpg?w=640&ssl=1\")
<\/p>\n
\n<\/p>\n
Last week, to commemorate World Password Day<\/a> \u2014 yes, there really is such a thing \u2014 we ran my 2015 article called Kill the password<\/a>, my treatise on the myriad problems associated with passwords. Trusona<\/a>, a company trying to transform identity, announced today that it is releasing support for passwordless entry on\u00a0Salesforce.com. Hey, it\u2019s a start.<\/p>\n The trouble with the password as we\u2019ve long known, is that it puts the burden on the user to create a good one and then remember it. If the purpose of the password is to ensure only authorized users have access to a system, then as we\u2019ve seen over and over with so many high-profile attacks, it\u2019s not really doing the\u00a0job.<\/p>\n Trusona hopes to change that by making it easier to access\u00a0applications and services in a secure way without having to enter anything. It\u2019s using Salesforce as a proof of concept, but it really could apply to any service, and you can expect them to layer on others over time.<\/p>\n You start by downloading the Trusona app on your iOS or Android smartphone and setting up your account. You ensure your identity in the app by entering a 6-digit pin, or if the device allows, using your fingerprint. When you open\u00a0the Salesforce application instead of entering a username and password \u2014 or if you\u2019re like me, clicking the Forgot Password link \u2014 you click the Trusona button instead.<\/p>\n A QR code instantly appears on the screen. With the Trusona application open, you point your phone\u2019s camera at the screen and it takes a picture automatically. In my experience, it found the code without having to maneuver the camera at all. Trusona CEO and company founder Ori Eisen says they have designed the experience to pick up the code even from odd angles.<\/p>\n After the camera picks up the code, an Accept button\u00a0appears in the Trusona application. You touch it, and you are logged into Salesforce.<\/p>\n If you\u2019re logging onto your application directly from a mobile device, Eisen said you simply touch the Trusona button and it deep links into the application and sends you the Accept button to the Trusona application.<\/p>\n <\/p>\n Eisen acknowledges that the QR code approach isn\u2019t ideal, but he says it\u2019s a starting point. \u201cAssume the QR code is version one of mechanisms to not type your username or password,\u201d he said. They needed something machine readable and this was a starting point, but the company is working on\u00a0a more dynamic approach that doesn\u2019t look like a QR code.<\/p>\n In addition, you can\u2019t try to game the system by using the same authorization a second time because the application anonymously records your phone\u2019s telemetry data \u2014 longitude, latitude, accelerometer setting and so forth \u2014 and since this\u00a0is a unique set of information, it can never\u00a0be repeated. If the system sees someone trying to authorize the app with those same settings, it will reject that user.<\/p>\n