Google has started rolling out its password cracking technology

Google has started to globally introduce the use of so-called passkeys to protect Google accounts, which allows users to abandon traditional passwords and verification codes sent during two-step authentication without having to give up secure identification. Instead, they can authenticate themselves from the device marked as secure with a PIN code or some other biometric identifier, so the identification takes place locally on the device. A Google Account password is created for each device (phone, tablet, laptop, desktop, etc.) and an encrypted private key is stored in the background on that device.

A Googlethat is Apple is in Microsoft announced last year that they will soon extend the support of the FIDO (Fast IDentity Online) login standards developed by the FIDO Alliance and the World Wide Web consortium on all their own platforms, be it mobile, computer, browsers, in which an important step is to make identification keys available. With this step, password-free login can slowly become part of more and more services. By setting up an ID key, unlocking the phone with any default action – entering a PIN, drawing a pattern or unlocking with a fingerprint – is enough to log into web services without having to enter a password, thanks to a unique cryptographic token shared between the phone and the website.

passkey

The new kraftie is here! The present and future of modern frontend development

On May 17, we will discuss what technological and labor market effects may affect the frontline profession.

The new kraftie is here! The present and future of modern frontend development On May 17, we will discuss what technological and labor market effects may affect the frontline profession.

Within the Google account settings, in the security section, there is a button for turning on identification keys, the function can be used with smartphones running iOS 16 and Android 9 or newer versions.

Passwords for Google accounts are stored on compatible hardware, but can be shared with other devices from within the operating system using services such as iCloud or password managers such as Dashlane and 1Password. Users can immediately revoke the password in account settings if they suspect someone else has accessed the account or lose the device that stores the password.

Password-only authentication is one of the biggest security problems, many users don’t pay attention to the risk of reusing passwords or turning on two-factor authentication. Passwordless sign-in allows users to use their device, such as their phone, as their primary authentication tool for apps, websites, and other digital services.

Physical device-dependent login makes it much more difficult for hackers to remotely compromise login credentials, making it more difficult to carry out phishing attacks that redirect users to a fake website to steal passwords.

Apple began taking steps to allow iPhones to sign in to any supporting website or app in September, and PayPal rolled out password support on iOS in October, followed by Shopify, Kayak, and DocuSign.


Source: HWSW Informatikai Hírmagazin by www.hwsw.hu.

*The article has been translated based on the content of HWSW Informatikai Hírmagazin by www.hwsw.hu. If there is any problem regarding the content, copyright, please leave a report below the article. We will try to process as quickly as possible to protect the rights of the author. Thank you very much!

*We just want readers to access information more quickly and easily with other multilingual content, instead of information only available in a certain language.

*We always respect the copyright of the content of the author and always include the original link of the source article.If the author disagrees, just leave the report below the article, the article will be edited or deleted at the request of the author. Thanks very much! Best regards!