Microsoft testing Windows 11 support for third-party passkeys

November 23, 2024 at 04:12PM Microsoft is testing updates to WebAuthn APIs that allow Windows 11 users to authenticate using third-party passkey providers alongside the native option, enhancing passwordless security. The updates, aimed at reducing data breaches, are rolling out to Windows Insiders, with ongoing collaboration with credential providers and developer support for plugin creation. … Read more

Will passkeys ever replace passwords? Can they?

November 17, 2024 at 01:43PM The text discusses the concept of passkeys, a secure alternative to passwords, defined by the WebAuthn specification. While passkeys enhance security and reduce phishing risks, implementation issues and user experience challenges hinder widespread adoption. A systematic approach to security must prioritize user-friendliness to ensure effectiveness in protecting against online threats. … Read more

Amazon says 175 million customers now use passkeys to log in

October 16, 2024 at 09:07AM Amazon reported that over 175 million customers now use passkeys for faster, passwordless sign-ins, enhancing security through cryptographic keys linked to biometric controls. The feature, initially introduced a year ago, is expanding to other services like AWS and Audible. The FIDO alliance has also announced a specification for portable passkeys. … Read more

Passkey News: FIDO Unveils New Specifications, Amazon Announces 175 Million Users

October 16, 2024 at 04:55AM FIDO Alliance released new specifications for securely transferring passkeys between providers, coinciding with Amazon’s announcement of 175 million passkey users. This development highlights advancements in passkey technology and its growing adoption in securing user authentication. **Meeting Takeaways:** 1. **FIDO Alliance Update**: The FIDO Alliance has released new specifications aimed at … Read more

Amazon says 175 million customer now use passkeys to log in

October 15, 2024 at 04:54PM Amazon has reported that over 175 million customers now use passkeys, enhancing sign-in speed significantly. Passkeys function as biometric or PIN-based digital credentials, improving security against breaches. Amazon plans to extend this feature to other services, while the FIDO alliance has introduced a new specification for portable passkeys. **Meeting Takeaways: … Read more

New FIDO proposal lets you securely move passkeys across platforms

October 15, 2024 at 11:19AM The FIDO Alliance has released a draft specification to standardize the secure transfer of passkeys between providers, addressing portability issues. The Credential Exchange Protocol (CXP) and Credential Exchange Format (CXF) aim to enhance interoperability and security during credential migration. Feedback is welcomed for further refinement of these drafts. ### Meeting … Read more

Chrome Users Can Now Sync Passkeys Across Devices with New Google PIN Feature

September 20, 2024 at 03:39AM Google introduced a Password Manager PIN for Chrome web users to securely sync passkeys across various devices. This PIN enhances security by end-to-end encrypting the passkeys, preventing access by anyone, including Google. Users can create a longer alpha-numeric PIN and are no longer required to scan a QR code. iOS … Read more

Google Password Manager now automatically syncs your passkeys

September 19, 2024 at 01:22PM Google announced that passkeys in Google Password Manager now sync across Windows, macOS, Linux, Android, and ChromeOS devices. Passkeys offer biometric authentication for secure and convenient access. Users can now add passkeys from various devices, with ChromeOS in beta and iOS support coming soon. Google also introduced a new PIN … Read more

The Silver Bullet of MFA Was Never Enough

August 22, 2024 at 06:53AM Recent attacks on high-profile organizations are drawing comparisons to action movies, where the hero triumphs over adversity with a magical solution. Multi-factor authentication (MFA) is seen as a silver bullet, but it’s not foolproof. Social engineering can bypass MFA, and other security measures like passkeys and device posture checks are … Read more

Google Adds Passkeys to Advanced Protection Program for High-Risk Users

July 10, 2024 at 06:52AM Google is now offering passkeys for high-risk users to enroll in the Advanced Protection Program (APP), providing a more secure and phishing-resistant alternative to passwords. This technology, based on the FIDO Authentication standard, eliminates the need for traditional passwords and is already being used by over 400 million Google accounts. … Read more