Windows 10: Why Passkeys Are Better Than Passwords and Why We'll All Be Using Them ... Some Day

Chien Sage · Apr 26, 2025 at 4:12 PM

Passkeys are difficult to explain because they use very complicated technology. But I'll give it a shot. Passwords must die. No matter how complex and lengthy your password is, it can be exposed in a data breach, intercepted in transmission, stolen by malware, and kidnapped by social engineering. The cybersecurity community has an expression: Hackers don't hack in - they log in. Basically, any method of authentication - proving who you are - that relies on 'shared secrets' - like passwords and verification codes - is no longer secure. What's needed is a method of authentication that proves w

:)

Brink · Apr 26, 2025 at 4:17 PM

Passkeys for Google Accounts are now available

For the first time, we’ve begun rolling out passkeys, the easiest and most secure way to sign in to apps and websites and a major step toward a “passwordless future.”

For some time we and others in the industry have been working on a simpler and safer alternative to passwords. While passwords will be with us for some time to come, they are often frustrating to remember and put you at risk if they end up in the wrong hands. Last year — alongside FIDO Alliance, Apple and Microsoft — we announced we would begin work to support passkeys on our platform as an easier and more secure alternative to passwords. And today, ahead of World Password Day, we’ve begun rolling out support for passkeys across Google Accounts on all major platforms. They’ll be an additional option that people can use to sign in, alongside passwords, 2-Step Verification (2SV), etc. So maybe, by next year’s World Password Day, you won’t even need to use your password, much less remember it! What are Passkeys? Passkeys are a new way to sign in to apps and websites. They’re both easier to use and more secure than passwords, so users no longer need to rely on the names of pets, birthdays or the infamous “password123.” Instead, passkeys let users sign in to apps and sites the same way they unlock their devices: with a fingerprint, a face scan or a screen lock PIN. And, unlike passwords, passkeys are resistant to online attacks like phishing, making them more secure than things like SMS one-time codes. Over the past year we’ve shared updates on bringing passkey experiences to both Chrome and Android, which services like Docusign, Kayak, PayPal, Shopify and Yahoo! Japan have already deployed to streamline sign-in for their users. Starting today, this will be available as an option for Google Account users who want to try a passwordless sign-in experience. Passkeys for Google Accounts Today, passkeys for Google Accounts are available. You can try them out here and setting it up is easy. For Google Workspace accounts, administrators will soon have the option to enable passkeys for their end-users during sign-in. Of course, like any new beginning the change to passkeys will take time, that’s why passwords and 2SV will still work for Google Accounts. We look forward to helping people and others in the industry take this next leap to make signing in easier and safer with Google.
Click to expand...

Source: https://blog.google/technology/safet...-the-password/

Brink · Apr 26, 2025 at 4:17 PM

Google bringing passkey support to Android and Chrome

Explore passkeys on Android & Chrome starting today Starting today, Google is bringing passkey support to both Android and Chrome. Passkeys are a significantly safer replacement for passwords and other phishable authentication factors. They cannot be reused, don't leak in server breaches, and protect users from phishing attacks. Passkeys are built on industry standards and work across different operating systems and browser ecosystems, and can be used for both websites and apps. Passkeys follow already familiar UX patterns, and build on the existing experience of password autofill. For end-users, using one is similar to using a saved password today, where they simply confirm with their existing device screen lock such as their fingerprint. Passkeys on users’ phones and computers are backed up and synced through the cloud to prevent lockouts in the case of device loss. Additionally, users can use passkeys stored on their phone to sign in to apps and websites on other nearby devices. Today’s announcement is a major milestone in our work with passkeys, and enables two key capabilities:

Users can create and use passkeys on Android devices, which are securely synced through the Google Password Manager.

Developers can build passkey support on their sites for end-users using Chrome via the WebAuthn API, on Android and other supported platforms.

To try this today, developers can enroll in the Google Play Services beta and use Chrome Canary. Both features will be generally available on stable channels later this year. Our next milestone in 2022 will be an API for native Android apps. Passkeys created through the web API will work seamlessly with apps affiliated with the same domain, and vice versa. The native API will give apps a unified way to let the user pick either a passkey or a saved password. Seamless, familiar UX for both passwords and passkeys helps users and developers gradually transition to passkeys. Signing in to a website on an Android device with a passkey For the end-user, creating a passkey requires just two steps: (1) confirm the passkey account information, and (2) present their fingerprint, face, or screen lock when prompted.

Signing in is just as simple: (1) The user selects the account they want to sign in to, and (2) presents their fingerprint, face, or screen lock when prompted.

Signing in to a website on a nearby computer with a passkey on an Android device A passkey on a phone can also be used to sign in on a nearby device. For example, an Android user can now sign in to a passkey-enabled website using Safari on a Mac. Similarly, passkey support in Chrome means that a Chrome user, for example on Windows, can do the same using a passkey stored on their iOS device. Since passkeys are built on industry standards, this works across different platforms and browsers - including Windows, macOS and iOS, and ChromeOS, with a uniform user experience.

We will continue to do our part for a passwordless future We have worked with others in the industry, including Apple and Microsoft, and members within the FIDO Alliance and the W3C to drive secure authentication standards for years. We have shipped support for W3C Webauthn and FIDO standards since their inception. Today is another important milestone, but our work is not done. Google remains committed to a world where users can choose where their passwords, and now passkeys, are stored. Please stay tuned for more updates from us in the next year as we introduce changes to Android, enabling third party credential managers to support passkeys for their users.
Click to expand...

Source: https://android-developers.googleblo...nd-chrome.html

cwr64 · Apr 26, 2025 at 4:17 PM

passkeys question

PASSKEYs seem to be the new web thing beyond passwords. My question is - using a 4-digit passkey (like 1234) on one site, can the same 4-digit passkey be used safely on "all" other sites, or do we need to have unique passkeys for each site as we now have unique passwords?

Windows 10: Why Passkeys Are Better Than Passwords and Why We'll All Be Using Them ... Some Day

Why Passkeys Are Better Than Passwords and Why We'll All Be Using Them ... Some Day

Why Passkeys Are Better Than Passwords and Why We'll All Be Using Them ... Some Day

Why Passkeys Are Better Than Passwords and Why We'll All Be Using Them ... Some Day

Why Passkeys Are Better Than Passwords and Why We'll All Be Using Them ... Some Day - Similar Threads - Why Passkeys Are

Why Passkeys Are Better Than Passwords and Why We'll All Be Using Them ... Some Day

Why do I get better performance with the 3060ti than the rx6800

Why do I get better performance with the 3060ti than the rx6800

Why can't I make a passkey?

Why can't I make a passkey?

Password Managers - Better than a Post-It?

Are Hardlinks Always Better than Shortcuts? If so, why use shortcuts?

Why does MP3 player sound better than computer?

Why gtx 780 ti is better than gtx 960?