Topic starter
24/06/2026 9:27 pm
TL;DR: Identiverse 2024 highlighted passkey interoperability, faster phishing-resistant MFA adoption, and rising pressure to unify verification and authentication as deepfakes and fragmented identity checks complicate trust, according to 1Kosmos. The signal for practitioners is clear: user-friendly assurance and identity proofing are converging, while legacy recovery and step-up patterns look increasingly brittle.
Editorial analysis by NHI Mgmt Group, based on content published by 1Kosmos: “Identiverse 2024: Key Takeaways from the Conference”.
By the numbers:
- Air New Zealand reported 25% of sign-ins using passkeys and a 30% opt-in rate within the first 24 hours.
- The workshop referenced a 2015 data breach affecting 21.5 million federal workers’ fingerprint data.
Key questions
Q: How should teams govern passkey adoption across login and recovery flows?
A: Treat passkeys as part of a broader assurance design, not a standalone MFA project.
Q: Why do deepfakes create more risk than ordinary identity fraud?
A: Deepfakes compress the time needed to impersonate a real person and make the attack look legitimate at the exact moment trust is granted.
Q: What are the signs that fragmented identity verification is creating security gaps?
A: Common signs include teams using different verification standards, onboarding happening faster than fraud review, and compliance checks varying by department.
Practitioner guidance
- Unify proofing, login, and recovery governance Map where users are asked to prove identity more than once and remove duplicated checks that do not add assurance.
- Test passkey interoperability before broad rollout Validate enrolment, transfer, and fallback flows across the keychains and platforms your workforce or customer base actually uses.
- Review recovery paths for deepfake resistance Inspect help-desk, video, voice, and document-based recovery steps for places where synthetic media could impersonate a user.
Bottom line: Passkeys improve phishing resistance, but their value depends on whether enrolment, transfer, and recovery are governed as one lifecycle.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 1 day ago by NHI Mgmt Group
25/06/2026 6:41 am
Passkey adoption is now a user-experience and governance problem, not just an authentication upgrade. The article shows that interoperability, device transfer, and multi-device support are shaping whether passkeys move beyond pilot use. That means teams need to evaluate the full identity journey, including enrolment, backup, and recovery, rather than measuring success only by login strength. The practitioner implication is that passkeys fail if the surrounding lifecycle remains brittle.
A question worth separating out:
Q: Should organisations prioritise phishing-resistant MFA over other identity projects?
A: For most enterprises, yes, when the goal is to reduce the most common account takeover path. It should be prioritised ahead of lower-value convenience changes because authentication weakness often becomes the first step in broader identity compromise and later governance failures.
👉 Read our full editorial: Identiverse 2024 shows passkeys and verification are converging
This post was modified 1 day ago by NHI Mgmt Group