Google Passkeys

2023: Product Announcement

On May 3, 2023, Google announced the start of mass implementation of the so-called access keys (Passkeys). This is said to be the easiest and safest way to log into apps and websites, and an important step towards a "password-free future."

Passkeys technology is an alternative to traditional passwords and codes in SMS sent out using the concept. two-factor authentications The new system is based on a cryptographic approach. To access a resource, you must have a pre-authenticated device, such as. smartphone Access keys allow you to log into applications and websites by analogy with how users unlock their gadgets. This can be biometric fingerprint-based identification or face image, or PIN code hardware security keys such as. YubiKey

Illustration of the work of Google Passkey

Unlike regular passwords, access keys are resistant to various fraudulent schemes, phishing, etc. Along with Google, Passkeys technology is promoted by Apple, Microsoft and other companies that are part of the FIDO Alliance. This is an open industry association founded in February 2013: its task is to develop authentication standards that "help reduce the world's excessive dependence on passwords."

When using access keys, the user's biometric information is never disclosed to the website or application. In addition, the keys themselves do not allow tracking users or devices, and the same cipher is never used for more than one resource. Access key protocols are carefully designed so that no information transmitted to sites can serve as a tracking vector. The new feature works on mobile devices running Android and iOS. Users will also be able to continue using standard login methods based on regular passwords and two-factor authentication.^[1]

Notes