Apple, Google, And Microsoft Want To Kill The Password With Passkey Standard

In an attempt to go passwordless, Apple, Google, and Microsoft have decided to kill the password using the Passkey standard, also called multi-device FIDO credential.

Apple, Google, And Microsoft Want To Kill The Password With “Passkey” Standard 1

To commemorate “World Password Day,” Apple, Google, and Microsoft are initiating a “joint effort” to eliminate the password on the first Thursday of May. “Expand support for a common passwordless sign-in standard created by the FIDO Alliance and the World Wide Web Consortium,” the major OS vendors say.

The standard is referred to as a “passkey” or a “multi-device FIDO credential.” Instead of a long string of characters, the app or website you’re logging into would send a request for authentication to your phone. You’d then need to unlock the phone, authenticate with a pin or biometric, and then you’d be good to go. Anyone who has set up phone-based two-factor authentication would recognize this approach, although it is a replacement for the password rather than an additional component.

For user involvement, a graphic has been provided:

Apple, Google, And Microsoft Want To Kill The Password With “Passkey” Standard 2

Some two-factor authentication systems use the Internet, whereas the new FIDO technique uses Bluetooth. “Bluetooth requires physical proximity,” according to the whitepaper, “which means we now have a phishing-resistant way to use the user’s phone during authentication.” The FIDO alliance states that Bluetooth is only used “to verify physical proximity” and that the actual sign-in procedure “does not depend on Bluetooth security properties.” Bluetooth has a bad reputation for compatibility, and I’m not sure “security” has ever been a significant problem, but Of course, both devices will require Bluetooth, which is standard on most smartphones and laptops but may be difficult to get on older desktop PCs.

[jetpack_subscription_form title="Subscribe to GreatGameIndia" subscribe_text="Enter your email address to subscribe to GGI and receive notifications of new posts by email."]

Your passkeys can be backed up by a large platform-holder like Apple or Google, similar to how a password manager can combine your logins under a single password. This would make it simple to transfer your credentials to a new device, prevent them from being lost, and sync passkeys between devices. If you lose your smartphone, you can still restore your accounts by logging into your big platform-holder account (uh—with a password?). It may also be a good idea to set up multiple devices as authenticators.

For years, companies have attempted to go “passwordless,” but the process has proven difficult. Starting in 2008, Google has a complete timeline on their blog post. Long, random, secret, and unique passwords are good, but the human element of passwords is always a concern. Long, random strings of characters are difficult for us to remember. It’s easy to forget or reuse passwords, and phishing scams attempt to fool you into disclosing your password to a third party. When there is a security breach, username and password pairs are easy to exchange, and there are large databases of compromised credentials available.

“These new capabilities are expected to become available across Apple, Google, and Microsoft platforms over the course of the coming year,” according to the FIDO blog post. Apple, which appears to have pioneered the “passkey” trend, has a mechanism in place in iOS 15 and macOS Monterey, but it is not currently compatible with other platforms. Google’s passkey support has already been found in Play Services on Android, indicating that it will soon be supported by even older Android devices.

GreatGameIndia is being actively targeted by powerful forces who do not wish us to survive. Your contribution, however small help us keep afloat. We accept voluntary payment for the content available for free on this website via UPI, PayPal and Bitcoin.

Support GreatGameIndia

7 COMMENTS

  1. ⁣“We, the Jewish people, control America, and the Americans know it.” — Israel Prime Minister Ariel Sharon, October 3, 2001
    “I don’t care if Americans think we’re running the news media, Hollywood, Wall Street or the government,” Jewish columnist Joel Stein wrote in Los Angeles Times December2008.“I just care that we get to keep running them.”
    Mr Stein’s reckless candor in admitting that the Jews ran America was to cost him his job at the LA Times.
    If Americans have lost their country to organized Jewry, they lost it slowly and imperceptibly. Indeed, most Americans remain unaware that their country no longer belongs to them. They fervently believe they still live in a democracy. This was a takeover not without precedent, however. It had happened to Germany. It had happened to Russia. It has now happened to America.
    Take Germany and Russia. Germany, a mere shadow of what it might have been, is now a defeated and demoralized nation, thoroughly browbeaten by Jewry and terrified of their masters in Israel. Without stretching it too far, one could say that Germany has become Israel’s cash cow.There is nothing particularly controversial about this observation. It had occurred to Eustace Mullins over twenty years ago:

    http://www.badpolitics.ro/netanyahu-once-we-squeeze-all-we-can-out-of-the-united-states-it-can-dry-up-and-blow-away/

  2. RED CROSS EXPOSES “JUDAIC” HOLOCAUST HOAX: INTERNATIONAL RED CROSS (IRC) DOCUMENT CONFIRMS 271 THOUSAND NOT 6 MILLION DIED IN CONCENTRATION CAMPS.
    web.archive.org/web/20220310121522/https://truedemocracyparty.net/2012/06/red-cross-expose-judaic-holocaust-hoax/

  3. this is going to be so broken. It does not provide true security if those who want to access your information, and have access to you, your device, and your bio-metrics. This is less about your security and more about the continuing pressure placed on manufactures of both hardware and OS software from governments and law enforcement agencies.

  4. gee whiz, i didn’t know that this was a article on jews controlling the world and making tons of money, i thought it was a article on computer technology.

  5. By eliminating written passkey they force everyone to centralize their identity on a single traceable device (smartphone). Just like in China’s big cities. More and more, online services require phone number. 50 years ago giving your phone number was just that, giving your phone number…. Today, giving your phone number is as opening the door on your traceable privacy. Amazing, all hooked like fishes in a bowl.

Leave a Reply