In October 2022, Google began adding Passkey support to the Android operating system and Chrome browser in beta. Writing in a blog post, Google stated that Passkey is a new way to log into apps and websites. It's easier to use and more secure than passwords.
Therefore, users no longer need to rely on pet names, birth dates, or the notoriously easy-to-guess "password123" string. Instead, passkeys allow users to log into apps and websites in the same way they unlock their devices with fingerprints, facial recognition, or screen lock PINs. Unlike passwords, passkeys are resistant to online attacks such as phishing, making them more secure than things like one-time SMS codes.
Passkey is an option in addition to the standard password and two-step verification for Google accounts. Users can set up a passkey on their accounts through Google's support website. Administrators will also soon be able to set up passkeys on employee accounts.
The biggest benefit of PassKey is that it helps users stay safe and avoid online scams.
In a Google Security blog post, the company detailed how passkeys work and how they are more secure than using only passwords. Passkeys are stored on the user's device, not on a server. Google says the main component of a passkey is a private cryptographic key, which is stored on the user's device.
When a user generates a key, a corresponding public key is uploaded to Google. Upon logging in, Google prompts the device to sign with the private key. The user's device only does so if they agree, requiring them to unlock the device. Google then verifies the signature using their public key.
If a user loses their device, they can recover the passkey in their account settings. Google recommends that users have a recovery phone number and email address on all accounts to easily change settings remotely.
Source link
Comment (0)