What are the best authentication methods for mobile and desktop apps?

由人工智能和领英社区提供技术支持

Authentication is the process of verifying the identity of a user or a device that wants to access a protected resource, such as an app, a website, or an API. Authentication methods vary depending on the type and context of the app, the level of security required, and the user experience desired. In this article, we will explore some of the best authentication methods for mobile and desktop apps, and how to implement them in your software design.

此文章中的业界达人

由社区从 8 条内容中精选。了解更多

1 Password-based authentication

Password-based authentication is the most common and familiar method of authentication for most users. It involves providing a username and a password that are stored and verified by the app or a third-party service. Password-based authentication is easy to implement and use, but it also has some drawbacks, such as the risk of password theft, phishing, or brute-force attacks. To enhance the security of password-based authentication, you can use techniques such as hashing, salting, encryption, and password policies.

添加您的观点

? Warren Parad

CTO Authress | AWS Community Builder | Speaker | Cloud Security Architect
举报内容
To say it has only "some drawbacks" is quite the understatement. Passwords are insecure by design, no amount of enhancement can fix that. Allowing passwords to a solution in 2024 is an unacceptable attack surface.

已翻译

赞
Can Delil Bozkurt
举报内容
Passwords are easy to implement and a common tool. You should aim for two factor authorization though. Don't forget: it always depends on the applications purpose. Financial or health data should be protected more than for example an alarm app. Sometimes, a password is even too much. Just keep in mind the purpose of implementing security.

已翻译

赞

2 Token-based authentication

Token-based authentication is a method of authentication that does not rely on storing or transmitting passwords. Instead, it uses a unique and encrypted token that is generated and issued by the app or a third-party service after the user provides their credentials. The token is then sent with every request to the app or the API, and validated by the server. Token-based authentication is more secure and scalable than password-based authentication, as it reduces the exposure of passwords and allows for stateless and distributed systems. However, token-based authentication also requires more complexity and overhead in generating, storing, and managing tokens.

添加您的观点

Can Delil Bozkurt
举报内容
It's for sure a lot of work. If it is necessary, you have to do it though. Especially with financial data or something like that, security has to be first.

已翻译

赞
? Warren Parad

CTO Authress | AWS Community Builder | Speaker | Cloud Security Architect
举报内容
Token based authentication is actually simpler than password based after you consider all the complexity that goes into it. Switching to JWT tokens is always the right call, it's more secure and simpler.

已翻译

赞

3 Biometric authentication

Biometric authentication is a method of authentication that uses the physical or behavioral characteristics of the user, such as their fingerprint, face, voice, or iris. Biometric authentication is becoming more popular and accessible for mobile and desktop apps, as it offers a high level of security and convenience for the user. Biometric authentication does not require the user to remember or enter any passwords or tokens, and it is harder to spoof or forge than other methods. However, biometric authentication also has some challenges, such as the accuracy, reliability, and privacy of biometric data, and the need for fallback options in case of failure.

添加您的观点

Can Delil Bozkurt
举报内容
This one is my favourite because it is so hard to fake this. I won't say impossible, but for sure very close to it. Given the fact that coupled with two factor authorisation it's so secure.

已翻译

赞

4 Multi-factor authentication

Multi-factor authentication is a method of authentication that combines two or more factors from different categories: something the user knows (such as a password or a PIN), something the user has (such as a token or a device), or something the user is (such as a biometric feature). Multi-factor authentication increases the security and confidence of authentication, as it makes it harder for an attacker to compromise all the factors. Multi-factor authentication can be implemented in various ways, such as using SMS codes, email links, push notifications, or third-party apps.

添加您的观点

Can Delil Bozkurt
举报内容
For some data or some mobile applications it is better to have multiple authentication methods coupled. Implementation may be long but it is worth it in the end.

已翻译

赞

5 Social authentication

Social authentication is a method of authentication that allows the user to sign in to an app or a website using their existing social media accounts, such as Facebook, Google, or Twitter. Social authentication simplifies the user experience and reduces the friction of registration and login, as it eliminates the need for creating and remembering new passwords. Social authentication also enables the app or the website to access some of the user's profile information and preferences from the social media platform. However, social authentication also has some drawbacks, such as the dependency on the social media provider, the potential privacy and security issues, and the lack of control over the user data.

添加您的观点

Can Delil Bozkurt
举报内容
This one can be good but it also can be very bad. It fully depends on the integrity of the social media service and how all of this will be implemented.

已翻译

赞

6 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Russell Brand

Founder & Managing Director - Responsible Solutions Ltd.
举报内容
What happens when a legitimate use can't get on? What happens when a bad guy can? What is the loss when a potential user doesn't become an actual user because it is just too hard?

已翻译

赞

Software Design

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

What are the best authentication methods for mobile and desktop apps?

1

2

3

4

5

6

1 Password-based authentication

2 Token-based authentication

3 Biometric authentication

4 Multi-factor authentication

5 Social authentication

6 Here’s what else to consider

Software Design

给文章评分

感谢您的反馈

更多Software Design相关文章

更多相关阅读内容

What are the best authentication methods for mobile and desktop apps?

1

2

3

4

5

6

1 Password-based authentication

2 Token-based authentication

3 Biometric authentication

4 Multi-factor authentication

5 Social authentication

6 Here’s what else to consider

Software Design

给文章评分

感谢您的反馈

查看其他技能