Apple @ Work is exclusively brought to you by Mosyle, the only Apple Unified Platform. Mosyle is the only solution that integrates in a single professional grade platform all the solutions necessary to seamlessly and automatically deploy, manage, and protect Apple devices at work. Over 45,000 organizations trust Mosyle to make millions of Apple devices work ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.
There was a post on X going viral a few weeks ago about password management. The password keeper book is more secure than most people want to admit. As the user said: Reminder that it is quite difficult to hack a piece of paper. Nobody is gonna zero day a book on a shelf in your house, and if they are somehow motivated enough to steal it, you have bigger things to worry about then your facebook password leaking…
With that being said, I still believe a properly implemented password management tool is one of the best security measures you can deploy in your organization. Dashlane is rolling out a new solution to help better secure credentials in the enterprise.
About Apple @ Work: Bradley Chambers has been an Apple IT admin since 2009. Through his experience deploying and managing firewalls, switches, a mobile device management system, enterprise grade WiFi, 1000s of Macs, and 1000s of iPads, Bradley will highlight ways in which Apple IT managers deploy Apple devices, build networks to support them, train users, share stories from the trenches of IT management, and ways Apple could improve its products for IT departments.
The adoption gap problem
Dashlann’s new solution solves what it calls the adoption gap. The IT team deploys the password tool, you send the onboarding email, you get decent usage in month one, and 6 months later, people are back to typing passwords into forms because nothing actually requires them to use it
Vault Enforcement lets IT admins require employees to log in through Dashlane on specific domains via a policy-deployed browser extension. Employees get a warning webcard on their first day, when they hit a login form on an enforced domain. The form is blocked the next day until they sign in to the vault. Admins can add their company logo and help desk contact to that card window, which is a nice way to get in front of complaints.
The SSO gap is bigger than people think
Dashlane says 37% of corporate applications are not managed by a single sign-on. That’s more than a third of your app’s surface area devoted to a username and password, with nothing else in front of it security-wise
Their telemetry data on which business apps see the most autofilled passwords instead of identity provider logins is: Salesforce, DocuSign, Adobe, Zoom, GitHub, Dropbox, Box, and Atlassian.
Some of it is the SSO tax, where vendors charge a premium for the login method, and that is a whole other topic I need to cover soon, but some of it is legacy passwords that still work on apps that were integrated with SSO years ago.
Passkeys are great, and still confusing
I want passkeys to win. They solve phishing in a way nothing else does, and on Apple, the implementation is about as easy as it gets, but I’ve walked enough users through their first passkey to know that “where does it live and what happens if I lose my phone” is still a genuinely hard question to answer in a way that lands. Ask a non-technical employee whether their passkey is in iCloud Keychain, their password manager, or on the device itself, and watch their answer
That confusion has a cost. Users who don’t understand a security tool will route around it, and a security control that gets bypassed isn’t a control at all. Dashlane’s Vault Enforcement is aiming to solve it from the other end.
Wrap up
Vault Enforcement is a smart feature that I hope other password managers copy. It’s also an admission that a decade+ of user education hasn’t closed the gap, and that at some point you stop asking and start requiring. Good IT security has to be easier than the workaround. Until it is, we’ll keep building enforcement tools to make up the difference.
Dashlane’s Vault Enforcement is now in open beta for companies on Dashlane’s Omnix Enterprise plan that use Chrome or Edge, with the extension deployed by policy and SSO enabled.
Apple @ Work is exclusively brought to you by Mosyle, the only Apple Unified Platform. Mosyle is the only solution that integrates in a single professional grade platform all the solutions necessary to seamlessly and automatically deploy, manage, and protect Apple devices at work. Over 45,000 organizations trust Mosyle to make millions of Apple devices work ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.
FTC: We use income earning auto affiliate links. More.
Comments