Google Introduces Passkeys as a More Secure Alternative to Passwords
Google has announced the launch of passkeys, a new way for users to sign in to apps and websites. The feature, which is already available for Google accounts, replaces traditional passwords with a fingerprint, face scan, or screen lock PIN.[0] Passkeys are said to be more secure than passwords as they are resistant to online attacks such as phishing. Google plans to promote passkeys in the coming months and nudge account holders to convert their traditional username and password login to a passkey. Other companies such as PayPal, Shopify, and Docusign have already deployed some level of support for passkeys.
Password-based security is one of the biggest security problems businesses face.[1] Poor password hygiene, reuse, weak and stolen credentials have plagued organisations for years, exposing them to significant threats and attacks including account takeovers, data breaches, and stolen identities.[2] Dashlane, one of the most popular password management apps, has done away with its so-called master password in favour of a new password-free solution.[3] The new system will rely on biometrics or a PIN code to authenticate users, eliminating the master password that must be guarded from the world.[4]
The newest standard for passkeys was developed by the FIDO Alliance, a consortium consisting of technology giants such as Google, Apple, and Microsoft.[5] The alliance unveiled its passkey initiative in 2022 with the goal of achieving a future without passwords.[5] Google's endorsement of passkeys signifies a significant stride towards the ultimate objective of eliminating passwords, which is a gradual process expected to take a few years. Additionally, startups like Hanko are developing passkey technologies.[6] Additionally, 1Password has become a member of the FIDO Alliance and has been diligently incorporating passkey assistance.[7]
While passkeys are new, some sites beat Google with login support.[8] Companies offering passkey login include eBay, Docusign, PayPal and Shopify.[8] However, passkey implementation can get messy, with Microsoft and Apple also supporting passkeys.[9] Passkeys created cannot be shared across each company’s platforms, meaning users may find themselves creating several passkeys for a single Google account, depending on what browsers and operating systems they use across their devices.
According to Google, the transition to passkeys will require some time, and therefore, conventional passwords and two-step verification will continue to function for Google Accounts. “While we encourage users to try out the convenience and security of passkeys, other methods like passwords and 2SV will still work across Google Accounts,” said Christiaan Brand and Sriram Karra, two Google executives who oversaw the project. Passkeys are said to be the beginning of the end for passwords.[10]
0. “Google Announces Support for Account Passkeys” MacRumors, 3 May. 2023, https://www.macrumors.com/2023/05/03/google-now-supports-passkeys/
1. “Google says goodbye to passwords with passkeys launch” VentureBeat, 3 May. 2023, https://venturebeat.com/security/google-says-goodbye-to-passwords-with-passkeys-launch/
2. “Google rolls out passkey support across accounts on all major platforms” CSO Online, 3 May. 2023, https://www.csoonline.com/article/3695173/google-rolls-out-passkey-support-across-accounts-on-all-major-platforms.html
3. “Dashlane’s new Passwordless Login skips master passwords” The Verge, 3 May. 2023, https://www.theverge.com/2023/5/3/23708302/dashlane-passwordless-login-no-master-password-passkey
4. “Dashlane announces passwordless login feature (but it's not passkeys)” 9to5Mac, 3 May. 2023, https://9to5mac.com/2023/05/03/dashlane-announces-passwordless-login-feature-but-its-not-passkeys/
5. “Google now lets you sign in with a passkey instead of a password” ZDNet, 3 May. 2023, https://www.zdnet.com/article/google-now-lets-you-sign-into-your-account-with-a-passkey-instead-of-a-password/
6. “Go ahead, forget that password. Use a passkey instead, says Google” The Register, 4 May. 2023, https://www.theregister.com/2023/05/04/google_passkey/
7. “Exclusive interview: 1Password CEO talks about the future of password managers with passkeys” 9to5Mac, 3 May. 2023, https://9to5mac.com/2023/05/03/interview-1password-ceo-passkeys
8. “Google Offers Passkey Logon, a Major Step Toward Banishing Passwords” CNET, 3 May. 2023, https://www.cnet.com/tech/services-and-software/google-offers-passkey-logon-a-major-step-toward-banishing-passwords/
9. “Go Passwordless: Google Accounts Now Support Passkey Sign-Ins” PCMag, 3 May. 2023, https://www.pcmag.com/news/go-passwordless-google-accounts-now-support-passkey-sign-ins
10. “Google Is Rolling Out Passkeys, the Password-Killing Tech, to All Accounts” WIRED, 3 May. 2023, https://www.wired.com/story/google-passkey-password-replacement
