Phishingresistenten

Phishingresistenten (phishing-resistant) approaches refer to concepts, technologies, and practices that make systems resistant to phishing attempts. The core idea is to reduce the likelihood that attackers obtain usable credentials or trigger unauthorized actions by deceiving users. Phishingresistenten defenses combine people, processes, and technology and aim to reduce both the probability and impact of phishing incidents.

Key components include technical controls such as DMARC, DKIM, and SPF to curb spoofed messages; secure email gateways; phishing-aware browsing protections; and user training with simulated phishing campaigns. A central element is phishing-resistant authentication methods, such as WebAuthn/FIDO2 hardware keys, passwordless logins, and other cryptographic proofs that do not rely on passwords.

Organizational practices support phishing resistance through governance, risk assessment, least-privilege access, and strong identity management. Logging, monitoring, and incident response plans help detect credential compromise and contain incidents quickly.

Limitations remain: attackers adapt, and no solution guarantees protection. phishingresistenten approaches require balancing security with usability and cost, and they perform best as layered defenses rather than a single solution.