Yandex ID

2024: Proof of Compliance with Industry Data Protection Standard

Yandex ID has confirmed compliance with the Industry Data Protection Standard. Yandex announced this on September 15, 2024.

The check was carried out by specialists from the company Kept. They used the requirements of the CSA, which provide for a versatile study of the safety management system and have 29 criteria. Consultants evaluated the model of organizing data protection in Yandex ID, management processes, information protection policy, threat action plan and much more. A separate area of ​ ​ verification is working with vulnerabilities: how the service detects them, what is done to prevent them, what response practices are used. As part of the audit for each criterion, the experts studied not only process documents, but also actual confirmations of their implementation. 

According to the results of the check, Yandex ID received a total of 27.5 points out of 29. At the same time, the minimum threshold is 18 points. This result confirms that the information security system in Yandex ID works efficiently: the service makes every effort to reliably protect data.

Independent audits of security systems are a regular practice in Yandex. The company undergoes about 40 similar inspections per year.

2023: Launch of a password-free picture entry

Yandex The ID is running a password-free log on to the picture. Yandex announced this on October 31, 2023.

Now, to safely log into Yandex services using the Yandex Key application, you can use not only a one-time code or QR, but also a picture.

The picture is a fast interactive authentication method that does not require entering a password and one-time code, everything happens automatically in just a couple of seconds. When logging into the Yandex ID account, an illustration will appear on the screen - it remains to go to Yandex Key and select it among four other images. The set of illustrations is updated each time, all images differ significantly in shape and shades.

Picture entry is as secure as sign-in with a one-time password or QR scan. The key additionally protects your account from hacking and stealing personal information: only your own mobile device can be used to log in. When suspicious activity is detected, the Yandex ID security system restricts login to the account.

At the first stage, this functionality is available to Yandex ID accounts with the "Password + one-time password" login method in Yandex Klyuch.

2022: The ability to delete information about orders in Yandex.Eda

Users can now delete information about their orders in. Yandex Ede The company Yandex announced on June 24, 2022. This can be done in the Yandex ID personal account using the tool for. data management More. here

2021: Partner Tool Launch - "Instant Login"

On December 21, 2021, Yandex announced the launch of a tool for partners - "Instant Login." With its help, stores can tell users that they have the ability to log in through Yandex ID. This will speed up checkout and, as a result, help increase conversion.

When a person registers on the site or makes a purchase, they are asked to enter a name, address and other information. When authorized through Yandex ID, they will automatically pull up from their Yandex account - of course, with the user's permission. A person does not have to enter them manually and come up with a password. At what point does the store itself decide to offer people authorization through Yandex. He can do this when a person has just opened a site or, for example, switched to choosing a product. Here's what it will look like:

"Instant Entry" has already connected several sites, including the pharmacy marketplace "Uteka." According to the site, 11% of users chose this method of registration. It took an average of 10 seconds less time than others. And the number of abandoned baskets, when the client begins to place an order, but then throws it, decreased by 5%. Yandex uses the open OAuth 2.0 authorization protocol, so it is not difficult to connect instant authorization. It is enough to register on the Yandex OAuth server.