Identity Security Blogs

YubiKey authentication gives enterprises phishing-resistant, hardware security key logins. Learn how it works and how to choose the best YubiKey for your teams.

Device ID is a unique hardware identifier that helps enterprises verify trusted devices, stop account takeover, and choose the best solution for security.

Risk-based authentication stops fraud without adding friction by scoring each login and stepping up verification only when a session looks risky. See how.

The first AI agent breach shows why identity design, runtime authorization, and governed non-human identities now decide the blast radius of attacks.

Ping Identity brings AI agent identity to self-managed software, letting private-cloud, hybrid, and air-gapped enterprises secure AI agents on their terms.

Ping Identity's Threat Intelligence team exposes a sophisticated brand impersonation scheme using cloaking, expired domains, and black-hat SEO at industrial scale.

Digital trust for AI agents means verifying identity, enforcing least-privilege access, and ensuring accountability. Learn how to establish it with IAM.

Encryption vs. hashing explained: learn the key differences between these security methods, when to use each one, and how salting strengthens passwords.

Strong authentication uses phishing-resistant factors to verify user identity. Learn key methods, best practices, and high assurance workforce authentication.