Passkey: the end of passwords

Les passwords have always been an unavoidable downside, leaving you with the choice between too easy (so you can easily remember it) or robust enough to be secure, but complex enough to require a PIN manager to remember it.

Until now, the most effective method to protect your accounts was to associate a password with a two-factor authentication (2FA).

Google has now presented another option: use an access key (passkey). In this article, you will find out what it is and how to use it.

What is a passkey?

The access key, also called passkey, is a new authentication method allowing you to connect to an account, whether on a website or an application. She represents a alternative modern to the traditional password and tends to replace it in the long term.

Passkeys are not conventional passphrases. They are based on pairs of cryptographic keys. This system requires two keys: a private key (to be kept secret) and a public key (to be shared).

This method is commonly used in the field of IT securitysuch as for end-to-end encryption of applications such as WhatsApp or Signal.

Passkey: advantages

Passkeys offer several advantages over traditional passwords:

• No need to hold them back : Private keys are stored only on the user’s devices, which act as passkey managers. They take care of memorizing these keys for you.
• Naturally robust : passkeys are long, strong and unique, which makes them very difficult to discover.
• Less exposed to data leaks : Servers only host public keys and not private keys, making them less attractive to hackers.
• Phishing Protection : if there are no more passwords to steal, phishing attempts are ineffective. Passkeys are linked to the specific application or site for which they were created, preventing attacks via fraudulent sites or malicious apps.

How do I create a passkey?

Currently, you can create a passkey on any compatible hardware, including laptops/desktops running Windows 10, Windows 11, or macOS Ventura (or later), and use browsers such as Chrome 109, Safari 16, or Edge 109 (or later).

If you are setting up a passkey on a mobile phone or tablet, it must be running iOS 16 or Android 9 (or later). You can also use it with any hardware security key that uses the FIDO2 protocol.

To create your passkey, go to g.co/passkeys

• If you have an Android smartphone that is already logged into your account, you may already have your access key active. If so, you should see your mobile appear on the page.
• If you are on an iPhone, click on “Create an access key” then “use another device”. All you have to do is scan the QR code and unlock your mobile.

When logging in to your account, you will only have to use your fingerprint or the FaceID of your Apple smartphone to confirm that it is indeed you who wish to log in.

usechatgpt init success