So where does password based solutions fit in the Zero trust implementations ?

How does a Zero trust solution with password look it.

• Password provides a moderate level of assurance
• Week factor in the MFA solution
• Easier factor to do attack like credential reuse attack
• Need to factor in password management solution

Zero Trust enforce don’t trust on anyone . The moderate level of assurance and lack of trust on Passwords because how easily they are shared, stolen, reused, replayed. Trusting someone with password is totally reduce the benefits of Zero Trust model. It becomes more of a pain to implement a robust Zero trust based solution with password in the system. Removing passwords out of the implementation equation gives the implementor time to focus on everything else.

How does a Zero trust solution with password less look it.

• Solution with higher level of assurance
• Reduced weakness of MFA solution
• Avoiding credential reuse attack
• Lower cost due to avoidance of password management solution and support system