Podcast · Talk Tech with Rob Scott

Why MSPs Must Go Passwordless Now

Danny Obaseki of Kzero joins Rob Scott to explain why passwordless authentication is not a future trend but a present necessity for MSPs and SaaS environments. Danny breaks down how biometrics are rep...

Episode summary

Danny Obaseki of Kzero joins Rob Scott to explain why passwordless authentication is not a future trend but a present necessity for MSPs and SaaS environments. Danny breaks down how biometrics are replacing passwords and how the shift to passwordless reduces risk in an AI-driven threat landscape where credential theft and phishing attacks are becoming more sophisticated by the day.

The conversation covers the practical steps MSPs can take to start transitioning their clients to passwordless authentication. Danny explains why waiting is risky: as AI makes phishing and credential attacks more effective, passwords become an increasingly weak link. For MSPs looking to differentiate on security and reduce client risk, passwordless is a clear opportunity to lead.

Key takeaways

  1. Passwordless authentication is a present necessity, not a future nice-to-have, for MSPs and SaaS environments.
  2. AI-driven phishing and credential attacks are making traditional passwords an increasingly weak security layer.
  3. Biometrics-based authentication eliminates the largest attack vector for most organizations.
  4. MSPs can differentiate by leading their clients to passwordless before competitors do.
  5. The transition to passwordless should start with high-risk accounts and expand systematically.

"Passwords are the weakest link in security, and AI is making them weaker every day. The time to go passwordless is now, not next year."

- Danny Obaseki

Show notes

Guest Introduction

Danny Obaseki is the founder of Kzero, a company focused on bringing passwordless authentication to MSPs and SaaS environments. Danny's expertise sits at the intersection of identity security, biometrics, and the evolving AI threat landscape. As credential-based attacks grow more sophisticated every quarter, Danny's perspective on why passwords are becoming the weakest link in security is both timely and urgent for every MSP managing client environments.

What We Cover

Why is passwordless authentication a present necessity, not a future trend?

Danny makes the case that the shift to passwordless is not something MSPs should plan for someday. It is something they need to act on now. AI-driven phishing attacks are getting better at stealing credentials faster than traditional defenses can keep up. Biometrics-based authentication eliminates the largest single attack vector for most organizations by removing passwords from the equation entirely.

How is AI making traditional password security weaker every day?

AI tools are enabling attackers to craft highly personalized phishing emails, generate convincing fake login pages, and automate credential stuffing at scale. Danny explains how each advancement in AI capability makes passwords less secure, regardless of complexity requirements or rotation policies. The arms race between password security and AI-powered attacks is one that passwords are losing.

How should MSPs approach the transition to passwordless for their clients?

Danny recommends starting with high-risk accounts, such as admin credentials and privileged access, and expanding systematically from there. The transition does not need to happen overnight, but it does need to start. He walks through practical steps MSPs can take to introduce biometric authentication without disrupting client workflows or creating user resistance.

How can MSPs differentiate their security offering with passwordless?

Passwordless authentication is still early enough in adoption that MSPs who lead with it can create meaningful differentiation. Danny explains how offering biometric authentication positions an MSP as forward-thinking on security while reducing the client's actual risk exposure. It is a case where doing the right thing for clients also strengthens the MSP's competitive position.

Why This Matters for MSPs

Identity is the new perimeter, and passwords are its weakest point. For MSPs managing client environments, every credential-based breach creates liability, remediation costs, and reputational damage. Moving clients to passwordless authentication reduces the most common attack vector while opening a new conversation about security maturity. Combined with current, enforceable contracts that clearly define security responsibilities, passwordless gives MSPs a stronger defensive posture and a compelling story to tell prospects.

About the Show

Talk Tech with Rob Scott is a podcast series from Monjur where CEO Rob Scott sits down with MSP industry leaders to explore the strategies, tools, and trends shaping managed services. New episodes are published regularly on YouTube. Subscribe to stay ahead of what is next in the MSP channel.