MojoAuth BlogPasswordless Authentication and Identity
Passwordless authentication, passkeys, CIAM and identity security: guides, analysis and product news from the MojoAuth team.
1,058 posts27 authorssince 2021RSS
NewOct 19, 2026 · Dev KumarHow to Choose a Cloud Migration Partner for Authentication-Heavy ApplicationsA cloud migration can look healthy on the dashboard while customers can't sign in. How to judge a migration partner on identity: access model, session and SSO continuity, testing, rollback and handover.Topics
Latest
Oct 8, 2026 · Gopal GehlotEvidencing Phone-Possession Controls in a SOC 2 or PSD2 AuditA carrier verification response satisfies one of NIST AU-3's six audit-record items. What PSD2 RTS Article 29 still needs, and the log record that closes the gap.
Oct 8, 2026 · Victor SinghIdentity and Access Management: Who Still Has Access?Are your access controls leaking? Discover how to conduct an effective audit to identify who still has access and secure your digital perimeter today.
Oct 8, 2026 · Nathan SharmaSession Management 101: A Beginner's Guide for Web DevelopersMaster the fundamentals of session management for building secure and stateful web applications. Learn cookies, server-side storage, and best practices in Node.
Oct 7, 2026 · Gopal GehlotA SIM-Swap Incident Runbook for Identity TeamsA SIM-swap runbook built on NIST SP 800-61r3's Detect, Respond and Recover — not the four-phase model r3 superseded in April 2025 — with every step marked sourced or design guidance.
Oct 6, 2026 · Gopal GehlotDoes Silent Network Authentication Stop SIM Swap? Separating the Check From the AttackAfter a SIM swap, CAMARA Number Verification returns true — and returns it correctly. Why the check is not evaded, what the separate SIM Swap API covers, and where both go silent.
Oct 5, 2026 · Gopal GehlotThe Silent Network Authentication Threat Model: What It Stops and What It Does NotAn attacker-capability matrix for carrier-network verification: three attack classes close cleanly, four survive untouched, and one new party enters the trust path.
Oct 2, 2026 · Alex RiveraManaged SOC Services: A Complete Guide to 24/7 Security Monitoring, Threat Detection, and ResponseManaged SOC Services
Oct 2, 2026 · Gopal GehlotModeling Your Real Silent-Verification Coverage Before You BuyNo operator publishes a Number Verification coverage rate. So here is the eight-gate model, the status of every input, and the three you have to measure yourself.
Oct 1, 2026 · Gopal GehlotPhone Verification and the Recovery Path: Where Account Takeover Actually HappensNIST SP 800-63B-4 sets no requirement that recovery match the authenticator it replaces. What §4.2.2.2 actually permits, quoted, and what it means for passkeys.
Oct 1, 2026 · Raj SinghSupport Tickets per 1,000 Logins, by Authentication MethodAuthentication support cost varies sharply by login method. Compare passwords, SMS OTP, magic links, and passkeys on support tickets per 1,000 logins.
Sep 30, 2026 · Gopal GehlotThe Fallback Downgrade: Why Silent-First Auth Inherits the Security of Its Weakest PathAn attacker who can force your fallback defeats silent verification without attacking it. Four authorities state the weakest-path principle; no standard requires it.
Sep 29, 2026 · Victor SinghProtecting Sensitive Data During the Business Financing Processhow businesses can protect sensitive financial and customer data during the business financing process, from application and document sharing to secure access, authentication, and compliance.
Sep 29, 2026 · Gopal GehlotWhat the Carrier Learns: The Data Flow Behind Silent Network AuthenticationHop by hop through a CAMARA number-verification call: what crosses the boundary, what the operator learns at /authorize, and the three questions no primary source answers.- Sep 28, 2026 · Andrew AgarwalMastering the Identity Governance Framework for SecurityLearn about Identity Governance Frameworks, their types, benefits, and real-life applications in cybersecurity. Enhance your knowledge for better security practices.
- Sep 28, 2026 · Andrew AgarwalMastering Identity Interrogation for CybersecurityDive into identity interrogation, its types, techniques, and real-world applications. Learn how to safeguard against identity threats effectively.
- Sep 28, 2026 · Andrew AgarwalMastering Identity Management Theory for CybersecurityLearn about Identity Management Theory, its types, processes, and real-life applications. Essential for cybersecurity students and enthusiasts.
- Sep 28, 2026 · Andrew AgarwalThe Essential Guide to Identity Providers in CybersecurityLearn about identity providers, their types, and real-life examples. Discover how they enhance security and simplify user authentication.
- Sep 28, 2026 · Andrew AgarwalMastering Your Identity Score: A Guide for EveryoneLearn about identity scores, their importance in cybersecurity, types, and real-life examples to enhance your understanding and online safety.
- Sep 28, 2026 · Andrew AgarwalMastering Identity Management: Key Concepts and ExamplesLearn about identity management systems, their types, processes, and real-life examples. Understand how they protect your digital identity effectively.
- Sep 28, 2026 · Andrew AgarwalProtecting Your Online Identity: Tips and TricksLearn how to protect your online identity with essential tips, types of online identities, and real-life examples to stay safe in the digital world.
Who writes here
All authors →Ready to go passwordless?
Add passkeys, magic links, OTP and social login to your consumer app with one API.
