Biometric two-factor authentication gains traction, says German BSI

Studies from Germany’s Federal Office for Information Security (BSI, Bundesamt für Sicherheit in der Informationstechnik) show a high level of acceptance for biometric two-factor authentication methods and recommend strengthening them to enhance online consumer protection.

F

rom making purchases to managing our finances, having digital accounts has become a regular part of our daily lives. However, this growing reliance on the digital world also exposes us to security risks. To protect our accounts and personal data, a robust authentication method is essential. The trend is to apply methods that combine at least two factors of authentication (in which case we refer to two-factor authentication or 2FA). 

A study published in April 2024, jointly conducted by Germany’s Federal Office for Information Security (BSI) and the Federation of German Consumer Organisations (VZBV, Verbraucherzentrale Bundesverband), delved into the use and perception of 2FA methods, with a particular focus on biometric methods such as fingerprint and facial recognition. 

Biometric authentication: a rising trend 

The results of the survey conducted by VZBV are clear: consumers highly value the ease of use and security of biometric methods. 82% of respondents consider the use of fingerprints to be very easy to adopt, while 80% perceive it as “very secure.” This preference for biometric methods is attributed to their inherently personal nature and the difficulty of falsifying them. 

The adoption of 2FA in the digital sector 

The study indicates a logical and significant penetration of 2FA methods in the banking sector, as institutions are legally required to offer them, as are insurance companies. 

In the online retail industry, the majority of the digital services analysed (73%) allow the use of 2FA, although major players like Zalando, Ikea, and Mediamarkt do not yet offer it. The availability of biometric methods is even more limited, with only 46% of services providing this option, including Apple and eBay. 

Despite this widespread adoption, there are gaps in the transparency of the information provided to consumers. In many cases, there is a lack of detailed information about the security methods and standards used, making it difficult for users to make informed evaluations of the available options. 

Benefits and concerns of biometric authentication 

The joint research by BSI and VZBV highlights the numerous benefits of biometric authentication: 

• Enhanced security: Biometric methods are difficult to forge, significantly reducing the risk of unauthorised access to accounts. 

• Ease of use: Biometric authentication is intuitive and quick, improving the user experience. 

• High acceptance: Consumers show a strong preference for biometric methods, which facilitates widespread adoption. 

While these benefits increasingly encourage consumers to trust these methods, the survey identifies three main concerns: data security and protection, ease of use, and the potential for malfunction. 

Among the most popular 2FA methods, SMS-based one-time passwords stand out, leading preferences with 60% of users. This method is highly popular due to its simplicity, involving the receipt of a unique and temporary code via a text message sent to the phone number associated with the account. 

In second place is biometric authentication via fingerprint, used by 34% of respondents when available. This method relies on the unique identification of the user’s fingerprints, providing an additional layer of security. Its main advantage is the convenience and speed of use, as it only requires placing a finger on a sensor. 

Lastly, facial scanning ranks as the third most used method, with 22% of users preferring it. This technology employs facial recognition to verify the user’s identity. Although it is increasingly common in mobile devices and access systems, its implementation can be affected by environmental factors such as lighting or camera quality, requiring cutting-edge technology to function effectively. 

The future of Two-Factor Authentication 

Two-factor authentication, particularly when combined with biometric methods, is emerging as the ultimate security standard for online accounts. As technology advances, we can expect to see broader adoption of more sophisticated biometric methods, such as 3D facial recognition and behavioural analysis. However, it is crucial that digital service providers commit to implementing these methods securely and transparently, ensuring consumer trust and regulatory compliance, while also prioritising accessibility and ease of use. 

Contact our experts in authentication solutions