October 17, 2023 at 03:09PM
Amazon has introduced passkey support as a passwordless login option to enhance security for customers. Passkeys are digital credentials that use biometric controls or PINs linked to devices for logging into websites. They mitigate the risk of data breaches, compromised accounts, phishing attacks, and information-stealing malware. Passkeys also simplify the login process for users and eliminate the need for password memorization or management. However, Amazon’s passkey implementation has some limitations, such as the inability to manage individual passkeys and their site-specific usage. Other companies like Google, Microsoft, WhatsApp, BestBuy, eBay, Paypal, and GoDaddy also support passkeys.
Key takeaways from the meeting notes:
1. Amazon has added passkey support as a new passwordless login option for customers. This feature offers better protection against malware and phishing attacks and significantly reduces the risk of network and data breaches.
2. Passkeys are digital credentials that allow users to log in to websites using biometric controls or PINs linked to devices like phones, computers, and USB security keys.
3. Passkeys act as a safeguard against phishing attacks and information-stealing malware by preventing the theft of authentication information.
4. From a user standpoint, passkeys make it easier to log in to an account as there is no need for a password manager or memorizing distinct passwords for each site.
5. Amazon has added a dedicated section in the “Your Account” > “Login & security” settings where users can generate and set up their passkey.
6. Passkey generation options on Amazon include Windows Hello, a security key, or a mobile device.
7. Testing has shown that passkeys can be generated using Yubikey on Google Chrome and Microsoft Edge, but not with Google Titan security key or Mozilla Firefox.
8. Windows 11 supports passkey creation using Windows Hello, but Windows 10 does not have this feature.
9. Once a passkey is generated, users can choose to log in using either their password or the passkey on subsequent logins.
10. Setting up a passkey does not prevent using a password to log in to the account, but passkeys are more secure and can help bypass entering passwords on potentially risky phishing landing pages.
11. Amazon’s passkey implementation has some limitations, including the inability to name or manage passkeys individually. Deleting a passkey requires deleting all of them.
12. Passkeys generated for one Amazon site cannot be used on Amazon sites in other regions.
13. Passkeys have gained popularity, with companies like Google, Microsoft, WhatsApp, BestBuy, eBay, PayPal, and GoDaddy also supporting this feature.