Windows 10: Windows Security issue with Google Pay passkey

RaXYZZZ · Apr 16, 2024

I'm on my fourth call with MS support agents and am growing pretty frustrated with the vicious circle Google Pay and Windows Security are keeping me in. Though I'm pretty sure Windows Security is the dealbreaker here.I am trying to make a payment on a legit website with a credit card I have saved in my Google Pay. GP asks for its CVV, everything checks out, except that then Windows feels they need to double check me and it may be me who enabled this in a moment when I wasn't that inspired, but I thought I'm getting more security and it tries to verify me by "Face" and "PIN" and a couple oth

:)

Brink · Apr 16, 2024

Passkeys for Google Accounts are now available

For the first time, we’ve begun rolling out passkeys, the easiest and most secure way to sign in to apps and websites and a major step toward a “passwordless future.”

For some time we and others in the industry have been working on a simpler and safer alternative to passwords. While passwords will be with us for some time to come, they are often frustrating to remember and put you at risk if they end up in the wrong hands. Last year — alongside FIDO Alliance, Apple and Microsoft — we announced we would begin work to support passkeys on our platform as an easier and more secure alternative to passwords. And today, ahead of World Password Day, we’ve begun rolling out support for passkeys across Google Accounts on all major platforms. They’ll be an additional option that people can use to sign in, alongside passwords, 2-Step Verification (2SV), etc. So maybe, by next year’s World Password Day, you won’t even need to use your password, much less remember it! What are Passkeys? Passkeys are a new way to sign in to apps and websites. They’re both easier to use and more secure than passwords, so users no longer need to rely on the names of pets, birthdays or the infamous “password123.” Instead, passkeys let users sign in to apps and sites the same way they unlock their devices: with a fingerprint, a face scan or a screen lock PIN. And, unlike passwords, passkeys are resistant to online attacks like phishing, making them more secure than things like SMS one-time codes. Over the past year we’ve shared updates on bringing passkey experiences to both Chrome and Android, which services like Docusign, Kayak, PayPal, Shopify and Yahoo! Japan have already deployed to streamline sign-in for their users. Starting today, this will be available as an option for Google Account users who want to try a passwordless sign-in experience. Passkeys for Google Accounts Today, passkeys for Google Accounts are available. You can try them out here and setting it up is easy. For Google Workspace accounts, administrators will soon have the option to enable passkeys for their end-users during sign-in. Of course, like any new beginning the change to passkeys will take time, that’s why passwords and 2SV will still work for Google Accounts. We look forward to helping people and others in the industry take this next leap to make signing in easier and safer with Google.
Click to expand...

Source: https://blog.google/technology/safet...-the-password/

win10freak · Apr 16, 2024

Firefox issues with Passkey on Windows

I’m running the latest version of Firefox and when I login to my Google account it’s asking for a security key to insert in which I don’t even use anymore and it’s not even listed under the Passkey option from my Google account. On Edge it works by scanning the QR code from my iPhone. For Firefox, I don’t don’t know what is the issue. I even cleared all my Firefox profiles and reinstalled. Same issue.

Brink · Apr 16, 2024

Google bringing passkey support to Android and Chrome

Explore passkeys on Android & Chrome starting today Starting today, Google is bringing passkey support to both Android and Chrome. Passkeys are a significantly safer replacement for passwords and other phishable authentication factors. They cannot be reused, don't leak in server breaches, and protect users from phishing attacks. Passkeys are built on industry standards and work across different operating systems and browser ecosystems, and can be used for both websites and apps. Passkeys follow already familiar UX patterns, and build on the existing experience of password autofill. For end-users, using one is similar to using a saved password today, where they simply confirm with their existing device screen lock such as their fingerprint. Passkeys on users’ phones and computers are backed up and synced through the cloud to prevent lockouts in the case of device loss. Additionally, users can use passkeys stored on their phone to sign in to apps and websites on other nearby devices. Today’s announcement is a major milestone in our work with passkeys, and enables two key capabilities:

Users can create and use passkeys on Android devices, which are securely synced through the Google Password Manager.

Developers can build passkey support on their sites for end-users using Chrome via the WebAuthn API, on Android and other supported platforms.

To try this today, developers can enroll in the Google Play Services beta and use Chrome Canary. Both features will be generally available on stable channels later this year. Our next milestone in 2022 will be an API for native Android apps. Passkeys created through the web API will work seamlessly with apps affiliated with the same domain, and vice versa. The native API will give apps a unified way to let the user pick either a passkey or a saved password. Seamless, familiar UX for both passwords and passkeys helps users and developers gradually transition to passkeys. Signing in to a website on an Android device with a passkey For the end-user, creating a passkey requires just two steps: (1) confirm the passkey account information, and (2) present their fingerprint, face, or screen lock when prompted.

Signing in is just as simple: (1) The user selects the account they want to sign in to, and (2) presents their fingerprint, face, or screen lock when prompted.

Signing in to a website on a nearby computer with a passkey on an Android device A passkey on a phone can also be used to sign in on a nearby device. For example, an Android user can now sign in to a passkey-enabled website using Safari on a Mac. Similarly, passkey support in Chrome means that a Chrome user, for example on Windows, can do the same using a passkey stored on their iOS device. Since passkeys are built on industry standards, this works across different platforms and browsers - including Windows, macOS and iOS, and ChromeOS, with a uniform user experience.

We will continue to do our part for a passwordless future We have worked with others in the industry, including Apple and Microsoft, and members within the FIDO Alliance and the W3C to drive secure authentication standards for years. We have shipped support for W3C Webauthn and FIDO standards since their inception. Today is another important milestone, but our work is not done. Google remains committed to a world where users can choose where their passwords, and now passkeys, are stored. Please stay tuned for more updates from us in the next year as we introduce changes to Android, enabling third party credential managers to support passkeys for their users.
Click to expand...

Source: https://android-developers.googleblo...nd-chrome.html

Windows 10: Windows Security issue with Google Pay passkey

Windows Security issue with Google Pay passkey

Windows Security issue with Google Pay passkey

Windows Security issue with Google Pay passkey

Windows Security issue with Google Pay passkey - Similar Threads - Security issue Google

Security passkey dialog keyboard defaults

Security passkey dialog keyboard defaults

Passkey issue

Passkey issue

Passkeys - I have tried to create a passkey in Google but got a message that my PC is...

Passkeys - I have tried to create a passkey in Google but got a message that my PC is...

Windows Security issue with Google Pay passkey

Google Pay

Introducing Google Pay