Passkeys are now enabled by default for Google users

#1

Post by vdelitz » Tue, Oct 10, 2023, 2:30 PM UTC

Passkeys are now enabled by default for Google users
blog.google

Re: Passkeys are now enabled by default for Google users

#2

Post by xhkkffbf » Tue, Oct 10, 2023, 3:10 PM UTC

One of my companies switched to Yubi pass keys. They were super cool -- until I tried to log in on a computer with only USB-A ports. My key is USB-C. I suppose I need to get an adapter now.

Re: Passkeys are now enabled by default for Google users

#3

Post by dogleash » Tue, Oct 10, 2023, 3:10 PM UTC

[flagged]

Re: Passkeys are now enabled by default for Google users

#4

Post by toomuchtodo » Tue, Oct 10, 2023, 3:11 PM UTC

xhkkffbf wrote: post #2

One of my companies switched to Yubi pass keys. They were super cool -- until I tried to log in on a computer with only USB-A ports. My key is USB-C. I suppose I need to get an adapter now.

Passkeys are stored within your device, iPhone, Android, browser, or system keychain.

https://passkeys.directory/

https://www.stavros.io/posts/clearing-up-some-passkeys-misco...

https://support.apple.com/en-us/102195

Re: Passkeys are now enabled by default for Google users

#5

Post by isykt » Tue, Oct 10, 2023, 3:11 PM UTC

Why is a pin more secure than a password?

Re: Passkeys are now enabled by default for Google users

#6

Post by jjoonathan » Tue, Oct 10, 2023, 3:11 PM UTC

Ugh, is this why my FIDO key started making me enter a redundant pin on the company login page (so: enter password, press FIDO key, enter PIN, press FIDO key)?

Re: Passkeys are now enabled by default for Google users

#7

Post by p1mrx » Tue, Oct 10, 2023, 3:13 PM UTC

What happens if I lose my phone?

Re: Passkeys are now enabled by default for Google users

#8

Post by kube-system » Tue, Oct 10, 2023, 3:13 PM UTC

isykt wrote: post #5

Why is a pin more secure than a password?

It isn't, and this isn't authentication with a pin.

Passkeys also requires the device. Using a pin with this is 2-factor. Pin + hardware token.

Re: Passkeys are now enabled by default for Google users

#9

Post by bufferoverflow » Tue, Oct 10, 2023, 3:13 PM UTC

Isn't it obvious that logging in with your face or your fingerprint is less secure? Sure, it's convenient, but any thug can just forcefully unlock your device.

Re: Passkeys are now enabled by default for Google users

#10

Post by powera » Tue, Oct 10, 2023, 3:13 PM UTC

Nope, not signing up.

The trend from Google continues to be towards "if you lose your phone with your credentials, you will be unable to log in". And Google refuses to create a scalable system that allows you access to your account by verifying your identity in person.

This is a recipe for disaster. And, possibly, a warning to move off GMail before it gets worse.