Dcard partners with AuthenTrend to advance Zero Trust efforts with fingerprint verified FIDO2 security keys.
Facing increasing cybersecurity threats, Dcard introduced AuthenTrend’s ATKey.Badge to enhance phishing-resistant authentication for its privileged accounts, strengthening the protection of critical systems and data.
SECTOR
Social Media
FOOTPRINT
Taiwan, Hong Kong, Macau, and Japan
SCOPE
Secure high privilege accounts
Achieve phishing resistance for users in contact with sensitive data.
SOLUTION
ATKey.Badge
A multi-protocol, multi-interface hardware key.
Since 2022 Dcard cybersecurity team has started migrating the company infrastructure to a Zero Trust approach to better protect their systems and user data.
Phishing resistance, especially for privileged accounts, became a top priority as attackers increasingly use AI to develop more sophisticated phishing attacks. Passkeys, and particularly hardware-bound ones, provide phishing-resistant authentication that helps protect against phishing attacks.
However, a main concern of Jerry Shiu, Dcard Director of Engineering, was to avoid requiring huge changes to employees’ workflows, knowing that more friction would lead to poor adoption and workarounds.
When initially evaluating how to achieve phishing resistance Dcard looked into other physical security keys, traditional types, USB based, exclusively for online services. While they did their job okay, they added a specialized tool with a single limited function that had to be carried always around only to perform logins.
Ultimately, Dcard settled on ATKey.Badge for its ability to combine physical and online access in a single tool that works exactly like a common ID badge. A familiar form factor and multiple uses provide users with a tool they can easily understand and use without extensive training.
“Within Dcard's security system, employees wear physical access cards.” Said Jerry Shiu. "ATKey.Badge is capable of integrating physical access cards, FIDO, PKI, and digital business cards, enhancing overall usability. For high-privileged users, it is a 'painless upgrade' while maintaining their original work habits; they can elevate their defensive capabilities against phishing attacks with a touch."
ATKey.Badge combines physical access control and security key functionality, providing phishing-resistant FIDO2 authentication for compatible online services. Its on-device fingerprint matching allows users to verify their identity with a simple touch, providing a convenient and secure authentication experience.
After completing a proof-of-concept evaluation, ATKey.Badge was rapidly rolled out to privileged users with minimal disruption to their existing workflows.
About Dcard
Dcard is a Taiwanese social platform, committed to freedom of expression and exchange of opinions in a privacy-focused environment. Since its inception in 2011, Dcard has accumulated over 11 million registered users and boasts an impressive scale of more than 22 million visits per month. It has also introduced "Professional Identity," allowing members to display their professional identity to easily discuss workplace topics, finding peers with comparable professional backgrounds to engage with.
About AuthenTrend
AuthenTrend is a global leader in biometric passwordless authentication, specializing in fingerprint-enabled FIDO2 security keys and smart cards. Founded in 2016 and headquartered in Taipei, Taiwan, AuthenTrend is dedicated to eliminating the risks of password-based breaches by providing secure, unphishable biometric solutions. Their flagship ATKey product line, including ATKey.Card NFC, integrates seamlessly with existing IT ecosystems, enabling organizations across healthcare, manufacturing, finance, and government sectors to achieve high-assurance security without sacrificing user convenience.