Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

A local password manager stores your credentials in an encrypted vault on your own device or server. You control your data and backups, but you also manage keys and updates yourself. That works for one person. Teams need role-based access, approvals for sensitive accounts, and logs that show who accessed what.

At 1Password, we believe strong security should feel like part of the workflow, not an interruption. That is the goal behind our work on user verification (UV) for passkeys.

In most organizations, standing privileges don’t show up all at once. They accumulate quietly. A role is added “temporarily.” A contractor needs broad access to finish a project. A service account gets oversized permissions because no one has time to fine-tune them. None of these choices seem harmful in the moment, but over time they build into a privilege surface that’s far too large to monitor and far too easy to misuse.

Looking ahead to next year, major technology providers are adopting stronger, phishing-resistant authentication methods. Among them is Microsoft, which is phasing out its native SMS and voice authentication services in favor of more secure alternatives, including passkeys, beginning February 1, 2027. The change will initially affect most Microsoft Entra ID users, then extend to Global Administrators and external users on July 1, 2027.

In the first post in this series, Wade shared how our team laid the foundation for using AI in detection engineering. The short version is that an LLM doesn't know your stack. Without documentation and workflow context, it can produce plausible results that are difficult to trust, regardless of which model you use.

In the cloud, attackers don’t need to break in. They just need a working set of keys.

Privileged Access Management (PAM) helps small businesses control, monitor and secure access to sensitive systems, administrator accounts and business-critical applications. It reduces the risk of credential theft, excessive permissions and unauthorized access, without requiring a large IT or security team. Small businesses are now one of the most targeted groups by cybercriminals. Attackers know that SMBs often run on lean IT teams, shared credentials and minimal oversight of who can access what.

Identity and access have changed drastically in the past decade. To meet the needs of the modern enterprise perimeter, Enterprise Password Managers (EPM) have evolved far beyond traditional workplace password storage.

Keeper Security, the leading zero-trust and zero-knowledge identity security platform, today announces it now protects more than 100,000 organizations globally. Keeper’s customer growth builds on consistent company milestones including surpassing $240 million in Annual Recurring Revenue (ARR) and also earning recognition from Gartner as the second fastest-growing competitor in the worldwide security software market in 2025.