Exploring Device Fingerprinting for Password-Less Authentication Systems
Shantanu Sudhir Gujar · 2024
Traditional password-based authentication systems pose security challenges due to the vulnerabilities associated with weak passwords and the storage of password representations on servers. In this paper, I investigate an alternative approach to user authentication using device fingerprinting. Device fingerprinting involves collecting information about a device’s attributes and configuration to create a unique identifier. Leveraging device fingerprints, I propose a password-less authentication system where users only need to remember their username. By comparing the computed device fingerprint with the stored identifier in the system’s database, users can gain access if the fingerprints match above a certain threshold. I discuss the origins and evolution of device fingerprinting, highlighting its use by online analytics and advertising companies for user tracking purposes. Despite privacy concerns, I argue that device fingerprinting offers advantages in authentication by eliminating the need for user input and providing enhanced security against brute-force attacks. I also examine various fingerprinting techniques and their effectiveness in identifying devices across different browsers and system configurations. Finally, I conclude by discussing the potential of device fingerprinting as a viable authentication method and suggest avenues for future research in security implementations.