Topic starter
24/06/2026 11:19 pm
TL;DR: Healthcare IT leaders overwhelmingly see passwordless authentication as mission-critical, yet only 7% of organisations have fully adopted it and 60% still rely heavily on passwords, according to Imprivata’s survey of more than 200 healthcare respondents. The gap shows that authentication modernisation now hinges on integration, clinical workflow fit, and governance, not just security intent.
Editorial analysis by NHI Mgmt Group, based on content published by Imprivata: “New Imprivata Survey Finds 85% of Healthcare IT Leaders Think Passwordless Authentication is Vital, but Adoption Lags Significantly”.
By the numbers:
- 85% of healthcare IT leaders think passwordless authentication is very important or mission-critical to the future of healthcare.
- Only 7% of organisations have fully implemented passwordless access for clinical and non-clinical staff.
- 60% of healthcare delivery organisations still rely heavily on passwords.
Key questions
Q: What breaks when password policy is too strict for clinical workflows?
A: When password policy ignores clinical workflows, users often create shortcuts, share access, or delay actions they should take immediately.
Q: Why do integration gaps slow passwordless adoption in healthcare?
A: Because passwordless has to work across applications, devices and session flows that were built around passwords.
Q: How do organisations know whether passwordless access is actually improving security?
A: Look for reduced password dependence, fewer lockouts, lower help desk reset volume, and stronger control over high-risk workflows such as shared workstation access and privileged clinical systems.
Practitioner guidance
- Map passwordless to real clinical workflows Test authentication flows at shared workstations, bedside devices and shift-change handoffs before expanding beyond pilot groups.
- Treat integration as a programme dependency Inventory application, endpoint and session dependencies that still assume passwords, then prioritise the systems that block scale most directly.
- Define exception handling before rollout Document fallback access, break-glass use and audit expectations so passwordless does not create unmanaged workarounds when users cannot authenticate normally.
Bottom line: Healthcare leaders broadly support passwordless authentication, but operational adoption remains low because the control still has to fit clinical reality.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
25/06/2026 8:06 am
Passwordless in healthcare is now an adoption governance problem, not an authentication preference. The survey shows broad agreement on the value of passwordless access, but agreement does not equal deployment. In healthcare, the decisive issue is whether identity controls can be introduced without breaking clinical flow, creating exceptions, or pushing users back to passwords. The programme question is governance under operational pressure, not whether the security case exists.
A few things that frame the scale:
- Only 36% of health IT leaders say their organisation applies a privileged access strategy consistently across the enterprise, according to Ponemon Institute research.
A question worth separating out:
A: They should design the control around documented exceptions, traceable fallback paths and clear role boundaries, rather than treating compliance as an afterthought. The goal is not to bypass regulation but to prove that stronger authentication can still support accountability in regulated care settings.
👉 Read our full editorial: Passwordless authentication in healthcare still trails its value