Newsletter
When Google first announced passkeys last year, it envisioned a future where users wouldn’t need to remember their passwords. Now, after multiple iterations, Google is finally making passkeys the default sin-in option for all users on Android.
“This means the next time you sign in to your Google Account, you’ll start seeing prompts to create and use passkeys, simplifying your future sign-ins. Our goal is the same as it has always been, giving you technology that is secure by default so that you have the strongest security but without the burden,” said Google product managers Christiaan Brand and Sriram Karra.
While this move aligns with the industry trend of transitioning to passkeys, it’s important to note that users can still choose traditional passwords and opt out of passkeys by disabling the “skip password when possible” option for their accounts.
So, what exactly are passkeys?
For those unfamiliar with the concept, passkeys, rather than relying on traditional passwords that are vulnerable to hacking attempts, use public key cryptography and unique digital keys stored on your device, allowing users to log in using their device’s authentication, such as a fingerprint or face ID scan. This eliminates the risk of phishing attempts since one key is stored with services like Google while the other is stored locally on the device.
Considering hackers cannot access passkey-protected accounts until they have physical access to the device, it raises the question: what if someone steals our phones or what if you lose your phone? In such cases, users will have the option to use additional authentication layers, such as their phone number, email address, or a hardware security key, to regain access to their accounts.
Furthermore, major password managers like 1Password and Dashlane have already implemented the new authentication method, thus making the switch to passkeys even more convenient.