CISOs Shift Strategy as Passwordless Authentication Gains Ground

The landscape of cybersecurity is undergoing a significant transformation as organizations increasingly embrace passwordless authentication. According to a recent survey conducted by Wakefield Research for Portnox, 92% of Chief Information Security Officers (CISOs) at companies with revenues exceeding $500 million report that their organizations have implemented, are implementing, or plan to implement passwordless authentication. This marks a notable rise from 70% in the previous year.

The findings, part of the study titled “CISO Perspectives for 2026,” reveal a decisive shift in strategic priorities regarding password management. As concerns over the effectiveness of Multi-Factor Authentication (MFA) grow, many CISOs are questioning the viability of traditional security measures.

Growing Distrust in MFA

The survey highlights a pervasive skepticism among CISOs regarding the efficacy of MFA. An overwhelming 96% express doubts about its ability to keep pace with evolving cybersecurity threats. Furthermore, 98% of respondents are concerned that MFA does not sufficiently protect employees, a figure consistent with 99% reported in 2024.

These concerns are compounded by the belief that high-profile security breaches are increasingly likely due to compromised passwords or authentication methods. In fact, 58% of CISOs view such breaches as very or extremely likely, indicating a pressing need for more robust security measures.

Driving Forces Behind the Shift

The transition to passwordless systems is not only a response to security vulnerabilities but is also influenced by employee feedback. CISOs have identified enhanced user experience and improved employee productivity as key benefits of moving away from passwords. Specifically, 41% of CISOs cite productivity improvements, while 39% mention a better user experience. This shift addresses a common concern, with 50% of CISOs reporting employee complaints about security measures hindering their work efficiency.

Denny LeCompte, CEO of Portnox, emphasizes the advantages of passwordless authentication in a recent statement. He notes, “MFA, while better than nothing, is a threat mitigation tool. By removing passwords entirely, passwordless authentication reduces the attack surface for cybercriminals and eliminates the risks associated with phishing, credential stuffing, and brute-force attacks.”

LeCompte further argues that passwordless solutions not only improve security but also align the most secure path with user convenience.

As the trend towards passwordless authentication gains momentum, two in five CISOs (40%) have already initiated or completed their passwordless implementation. The completion rate has notably doubled from 2024 to 2025, underscoring a collective move away from traditional MFA methods.

The findings from Portnox signal an important evolution in cybersecurity strategies, reflecting a broader recognition that password management practices must adapt to meet contemporary security challenges. As organizations increasingly prioritize both security and user experience, passwordless authentication is set to become the new standard in identity and access management.