Google uses Passkey as the default login method.

This is the latest move since Google announced support for a passwordless standard for accounts across its platforms. Passkey is a solution supported by the FIDO Alliance that makes logging into apps and websites more secure without traditional passwords. This can be achieved by simply unlocking the user's computer or mobile device using biometric technology (fingerprint or facial recognition) or a PIN.

Google says that the next time users log into their account, they will start seeing prompts to create and use a passkey, simplifying future logins. It also means they will see the 'skip password' option enabled in their Google Account settings.

Passkey is a login mechanism that utilizes public-key cryptography to authenticate user access to websites and applications, with the private key securely stored on the device and the public key stored on a server.

Using a passkey as the default login authentication method simplifies the login process.

Each passkey is unique and linked to a specific username and service, meaning a user will have at least as many passwords as they have accounts. However, they will have multiple passkeys for each account because it only works within the same platform. That is, a user may have separate passkeys for different websites on Android, iOS, macOS, and Windows.

When logging into a website or application that supports passkeys, a random code is generated and sent to the user, requesting verification using their biometrics or PIN to sign a test version and send it back to the server.

The benefits of PassKey are not only that it reduces the hassle of remembering passwords but also its ability to prevent phishing, thereby protecting users from common account hijacking attacks.

Source link: https://thanhnien.vn/google-dung-passkey-lam-phuong-thuc-dang-nhap-mac-dinh-185231011090228208.htm