Cloud Hosting

Google passkeys are finally here. And they are bringing us closer to a future where you no longer need to remember your hard-to-crack passwords. But it goes without saying that there are many misconceptions about passkeys, from their usability to their security and privacy benefits.

Long story short, Google passkeys are just the first implementation in making the login process more secure than ever before. In just a matter of months, dozens of industry partners, such as Microsoft and Apple, will finish rolling out the remaining pieces. And the great part is that passkeys are easier to use than passwords, and it takes only a few minutes to set up.

Before getting into how to set up Google passkeys, lets first try to understand how a passkey works. And in this case, Apple provides a very helpful description that offers easier-to-digest info about the technical underpinnings. As Apple describes, passkeys are built on the Web Authentication standard, and they utilize public key cryptography.

During the registration process, the operating system generates a unique cryptographic key pair that gets associated with a website or an app. For every account or website account, passkeys will be generated by the device uniquely and securely.

One of the passkeys that are generated by the operating system becomes public and gets stored in the server. And even though that passkey becomes public, the other one is private, which is required to complete the sign-in process. On an Apple device, theres the Face ID or Touch ID, which you can use to authorize the use of the private key.

As no shared secret gets transmitted, the server does not need to protect the passkey thats public. Therefore, passkeys get a different strength level, and the credentials become highly resistant to phishing. Most importantly, platform vendors are working together within the FIDO Alliance, which assures cross-platform compatibility. Most importantly, this login method is about to work on as many devices as possible.

According to FIDO specs, a syncing mechanism is a must. It is required to offer end-to-end encryption, which is how the password syncing mechanism and iCloud Keychain basically work. That means that the private key will remain unknown to the cloud provider. It will only be accessible to you through biometrics or PIN

To start with, passkeys eliminate the need to create new or remember sophisticated passwords. It might not be a new revelation for those who use a password manager. However, password managers are not secure as you might have thought. There have been reports of many severe breaches in the past.

And as passwords keep all the vital credentials and passwords in one place, your entire digital life can get exposed once it gets hacked. But with passkeys, that risk basically goes out of the window. Yes, things could likely change in the future when the bad guys develop new tools and methods. However, for now, passkey can provide unrivaled Internet security.

As stated earlier, it literally takes a few minutes to set up Google passkeys. To get started, you just need to log into your account in the traditional way through these simple steps

Once you have logged into your Google account, you might not find your specific Android device to set up the passkeys. In that case, you have to do the following

When thats taken care of, it will be time to create Google passkeys with your Android device. These are the steps that you need to follow

And thats it! You have successfully set up Google Passkeys on your Android device. You can now use them to get into your Google account on other devices.

With the passkeys enabled, you will need to go through a few simple steps to use them while logging into your Google account. Take a look

With that, you are all done using Google passkeys to get into your account. This login method adds an extra layer of security that will give you an advantage over the bad guys.

Read the rest here:
Days of Remembering Passwords Are Over! Heres How to Set Up Google Passkeys - Gizchina.com