In one of my groups leaders decided to reuse google suite accounts. It was really difficult for me to accept the account from a other person. Google sent multiple notification to other person phone, had to unlogin, configure two factor authentication, the other person had to ignore warnings about Linux access. It was nightmare.
Passkeys are now enabled by default for Google users
51–60 of 684 posts
Re: Passkeys are now enabled by default for Google users
#52"To use passkeys, you just use a fingerprint, face scan or pin to unlock your device, and they are 40% faster than passwords — and rely on a type of cryptography that makes them more secure. " Who wrote this sentence? It's just a mess.
also, "ah yes, a several digit pin, famously more secure than a same-length password that adds even as little as letters".
PIN for secure module with throttling and max wrong attempt count is indeed safer than a password you can brute force offline.
Re: Passkeys are now enabled by default for Google users
#53As a user I still don't understand this. What happens if there's a house fire or something and all my devices where I'm logged in with Google break? How do I log into my account again?
Passkeys are typically synced to cloud storage.
That does seem circular in Google's case, no? What cloud storage?
Re: Passkeys are now enabled by default for Google users
#54"To use passkeys, you just use a fingerprint, face scan or pin to unlock your device, and they are 40% faster than passwords — and rely on a type of cryptography that makes them more secure. " Who wrote this sentence? It's just a mess.
also, "ah yes, a several digit pin, famously more secure than a same-length password that adds even as little as letters".
You have to possess the device and the PIN, so yes, it is quite a bit more secure.
Re: Passkeys are now enabled by default for Google users
#55As a user I still don't understand this. What happens if there's a house fire or something and all my devices where I'm logged in with Google break? How do I log into my account again?
I think you’ll still need a password on your account for cases where no passkey is available, and possibly for other scenarios of heightened fraud risk. That’s why the setting they’re describing in the blog post is named “Skip password when possible”. Disclaimer: although I worked for Google many years ago in a role entirely unrelated to Google account authentication, I have no inside info on this announcement, could…
I think there's going to be an issue with people forgetting passwords they lasted used 5 years ago. Recovery needs to be much better thought out.
Re: Passkeys are now enabled by default for Google users
#56As a user I still don't understand this. What happens if there's a house fire or something and all my devices where I'm logged in with Google break? How do I log into my account again?
When you get a duplicate of your SIM card you can then verify it is you with a SMS code.
There are also security questions and alternate email you can configure just in case.
Re: Passkeys are now enabled by default for Google users
#57Nope, not signing up. The trend from Google continues to be towards "if you lose your phone with your credentials, you will be unable to log in". And Google refuses to create a scalable system that allows you access to your account by verifying your identity in person. This is a recipe for disaster. And, possibly, a warning to move off GMail before it gets worse.
I'm about at the threshold for wanting to de-google my life. Do you have an alternative email provide you recommend?
I use fastmail.com because I wanted to use my own domain. They're not free - make of that what you will.
Re: Passkeys are now enabled by default for Google users
#58What happens if I lose my phone?
They are saying losing phone + revealing pin is harder than exposing your password/phishing/social engineering/cracking.
Re: Passkeys are now enabled by default for Google users
#59As a user I still don't understand this. What happens if there's a house fire or something and all my devices where I'm logged in with Google break? How do I log into my account again?
To add, it is pretty poor there is no FAQ linked to from that post to answer basic non-technical questions as to how this is intended to be used. I assume as a technical person, the answer is I should have a backup device with a friend and/or store my passkeys somehow on my Apple or Microsoft or password manager account as well. But it needs more explanation in detail from Google!
[deleted]
Re: Passkeys are now enabled by default for Google users
#60As a user I still don't understand this. What happens if there's a house fire or something and all my devices where I'm logged in with Google break? How do I log into my account again?
You go through.... account recovery? Like if you lose your password today?
And then? get asked for a unique pw that you havent typed for ages or a duplicate pw that you use for everything?