2.5 Hours Monthly Lost: Frontline Auth Failures Drive 95% MFA Workarounds
A new survey reveals that nearly all IT decision-makers have observed staff circumventing authentication rules to maintain workflow speed in high-pressure environments.
Key points
- % of surveyed IT leaders reported frontline workarounds for MFA in the past year.
- % of organizations faced attempts to abuse account recovery or reset processes.
- Frontline workers lose an average of 2.5 hours monthly to authentication failures.
Frontline employees in healthcare and manufacturing are routinely bypassing multifactor authentication to avoid login delays, creating significant security gaps according to a recent survey. Sapio Research polled 700 IT and security decision-makers in August, finding that 95 percent had witnessed these workarounds over the previous twelve months. These habits include staying signed in on shared devices and sharing credentials, which sever the link between a specific user and their account activity.
The risk
These behaviors allow the next worker to act under a previous user’s identity, making it impossible to trace actions to a single individual. Attackers exploit this same vulnerability from outside the organization. Sixty-two percent of respondents reported confirmed or suspected attempts to abuse account recovery, password resets, or unlocks in the past year. Confirmed cases alone accounted for 28 percent of organizations, meaning more than one in four could point to a specific unauthorized attempt to regain access.
Who is exposed
The survey respondents represent organizations with at least 500 employees located in the US, UK, France, and Germany. These teams operate in high-stakes environments where speed is critical. On average, respondents estimated that 37 percent of their frontline workers encounter an authentication problem in a typical month. This friction drives the adoption of risky shortcuts, as workers prioritize immediate access over security protocols to maintain their workflow efficiency.
Cost and compliance
Each affected worker loses approximately 2.5 hours per month dealing with these authentication issues. Organizations use various methods to verify identity during recovery, including employee badges, email, SMS codes, biometrics, and manager approval. However, no single method is used by a majority of respondents. Forty-eight percent of leaders expressed very or extreme concern about AI-enabled impersonation, matching the level of worry regarding conventional social engineering attacks.
What should you do?
Review your account recovery procedures to ensure they do not rely solely on easily compromised channels like SMS or email. Implement stricter session management policies for shared workstations to prevent credential persistence. Train help desk staff to recognize signs of social engineering during identity verification steps, especially given the rise in AI-enabled impersonation concerns.
The background in plain language
Multifactor authentication adds a second layer of security beyond just a password, typically using a phone or token. When systems are slow or unreliable, users often seek shortcuts to bypass these checks. Account recovery is the process used when a user loses access, requiring them to prove their identity. If this process is weak, attackers can impersonate legitimate users. Teams usually rely on multiple verification methods, but none are perfect. Check whether your current recovery steps can be faked by someone with access to public information or intercepted messages.
What to do and how to stay safe: Sapio Research
- Audit shared workstations to ensure sessions are terminated when users step away, preventing credential reuse.
- Evaluate your account recovery methods to ensure they do not rely exclusively on channels that attackers can intercept or spoof.
- Monitor logs for unusual login patterns that might indicate shared credentials or unauthorized account resets.
- Train staff on the risks of bypassing security controls, emphasizing that workflow speed should not compromise identity verification.
Step-by-step guide: Browser security settings are the architectural walls of your digital life
General security guidance from the Vector Tribune newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
How common are MFA workarounds among frontline workers?
According to Sapio Research, 95 percent of IT and security decision-makers surveyed reported seeing frontline workers use workarounds in the past 12 months.
What percentage of organizations faced account recovery abuse?
Sixty-two percent of respondents reported confirmed or suspected attempts to abuse account recovery, password resets, or unlocks in the past year.
How much time do workers lose to authentication issues?
On average, each affected frontline worker loses about 2.5 hours per month to authentication problems, according to the survey respondents.
