Feb 02 2023

Password Fatigue Is Real. Here's What Businesses Need to Know

Password fatigue is a real problem for businesses. Here’s what they can do while they await passwordless authentication.

Does the term “password fatigue” sound familiar? It’s ironic that increased security measures put in place to keep us safe may sometimes do the exact opposite. Mandatory password changes, lengthy password requirements and security questions, while well intentioned, can lead some people to backslide with their digital hygiene.

With the average person reusing the same password 14 times across their portfolio of digital accounts, it’s no wonder the FBI received a record number of cybercrime complaints from the American public last year, with potential losses exceeding $6.9 billion.

Click the banner to unlock exclusive security content when you register as an Insider.

How To Prevent Password Fatigue

Password fatigue is a reaction to the fact that safety and functionality are often seen as in opposition to each other. Our days are filled with a series of different programs and platforms, each requiring its own login credentials.

The average adult has at least 100 passwords to keep track of, and the majority of Americans say they’re locked out of an average of 10 accounts per month. It’s impossible to remember all the passwords that safeguard our daily lives. The seemingly endless need to remember or reset passwords can wear people down, resulting in risky behavior.

DISCOVER: Find out the five steps to achieve passwordless authentication. 

One study revealed that 92 percent of people are aware of the security risk associated with reusing passwords, but 65 percent reuse them anyway. The password has stuck around so long despite its flaws precisely because it is not easy to replace.

Passwordless authentication is available for use today; however, most organizations have not yet deployed the technologies to support it. For now, they rely on multi-factor authentication to mitigate the risk of passwords being hacked. That’s a good intermediate step, but it doesn’t do anything to solve password fatigue.

DIVE DEEPER: Discover how security strategies must adjust to accommodate work from anywhere.


Percentage of people are aware of the security risk of reusing passwords, but 65 percent reuse them anyway.

Source: 2021 LastPass Password Security Report

Resetting Passwords: What You Need to Know

In addition to multi-factor authentication, businesses can help employees by deploying password management technology that acts as a digital logbook — a compilation of passwords to various accounts that can be accessed through a single master password.

Password managers can automatically monitor your password strength and help you create strong, unique passwords for every account.

Take the following factors into consideration when deciding which password manager is best for your needs:

  • Will it protect your organization against a cyberattack? You are best served by a manager that cr­eates high-strength, random passwords for each website, application and service that you use. Ensure you have alerts and dark web monitoring engaged so you can take immediate action if your credentials are leaked in a public data breach.
  • Does it enable multi-factor authentication? An additional PIN sent to employees’ digital devices, or one that works in tandem with an authentication app, is one element that separates a dedicated password manager from a browser-based manager, which saves and auto-fills passwords, giving anyone using your computer access to your online accounts.
  • How flexible is it? Some password managers can only be used with one device type, or with specific software systems. Make sure you’re protected on every platform, with a manager that securely syncs across all your devices.
  • Is it easy to use? Safely storing passwords should make employees’ lives simpler. Ensure your password manager can auto-fill user IDs and passwords, and consider additional features, such as the ability to add payment cards for faster checkouts.

READ MORE: Learn how businesses can prepare for passwordless authentication. 

Custom fields can help securely save important information such as your driver’s license or passport number, or even sensitive files, documents, photos and videos. Most experts agree that the ongoing use of passwords represents a security risk for organizations. Until passwords are a thing of the past, however, businesses should do all they can to reduce that risk.

Designer491 / Getty Images

Learn from Your Peers

What can you glean about security from other IT pros? Check out new CDW research and insight from our experts.