June 2026 Summaries

Passkeys are increasingly positioned as the preferred authentication method because they use phishing-resistant public-key cryptography and device unlock mechanisms, but verification codes remain necessary as carefully designed fallbacks for account recovery, unavailable or new devices, public devices, and some step-up actions. SMS and voice codes carry risks such as phishing, carrier delays, phone-number reassignment, and message interception, leading NIST to classify them as restricted authenticators, so higher-risk recovery and sensitive transactions should use stronger methods and additional risk signals. Effective code-based fallback systems should prioritize rapid, reliable delivery across channels, clear status information, appropriate expiration of older codes, alternate recovery paths, and concise messages that identify the business and purpose without requesting sensitive information. As passkey adoption reduces routine code usage, remaining verification messages will become more critical in recovery and exceptional scenarios, making a layered authentication approach preferable to relying on either passkeys or codes alone.

Personalized marketing is most effective when it feels helpful rather than revealing, using customer information to improve relevance, timing, and convenience without exposing how extensively their behavior has been tracked. Information customers explicitly provided through purchases, bookings, or stated preferences is generally more acceptable to reference than inferred behavior, third-party data, or sensitive details involving health, finances, or location. Businesses should use observed and modeled data internally to choose messages, offers, and delivery channels while avoiding language that makes customers question how the company knows something about them. Because privacy and direct-marketing requirements vary by jurisdiction, organizations should also be transparent about data use, provide customer controls, and apply greater restraint as data becomes more sensitive. Overly precise or unexpected personalization can erode trust, prompt opt-outs, and make future communications feel intrusive, whereas successful personalization reduces effort and leaves customers simply feeling that a message was useful.