Passwordless Authentication Implementation at Carers ACT

This case study details the implementation of passwordless authentication at Carers ACT, an Australian carer support organization. The organization aimed to secure sensitive health information and streamline access for support workers. With a focus on improving security and user experience, Carers ACT adopted the YubiKey, a hardware security key that supports FIDO2/WebAuthn protocols. The case study outlines the challenges faced by the ICT department, including the need to protect against sophisticated cyber threats and the burden of password management on staff. By replacing traditional password systems with YubiKeys, Carers ACT enhanced security while reducing IT support costs associated with password resets. The deployment involved issuing YubiKeys to all support workers and providing training to facilitate a smooth transition. The case study also highlights the positive feedback from staff regarding the improved login experience and the organization's plans to extend the use of YubiKeys across other departments. Overall, the implementation reflects a commitment to maintaining high standards of security and compliance in a healthcare setting.