The only passwordless login standard will be based on cryptographic keys. It is developed by the FIDO Alliance in collaboration with the World Wide Web Consortium.

Detail

The company symbolically announced its project on May 5, World Password Day.

• The Google blog states that the main authentication device in apps, websites and other digital services will be a smartphone.
• Biometrics or PIN will be used for login.
• In this case, security is provided by a unique crypto token passkey transmitted between the smartphone and the site.
• Such encryption keys will be asymmetric. This means that if attackers gain access to part of the token as a result of hacking the site, there will be no threat to users.

Password-free login interface for Google / Google Photos

It is unclear what will be used to connect to a particular smartphone. That is, exactly what the user needs to enter the service in order for the system to recognize it and send a confirmation request to the desired gadget. It will likely be a regular login, phone number or email, but companies aren’t talking about that yet.

The main idea of ​​this approach is make the authorization process dependent on the physical device. This will not only increase the security of accessing sites, but also increase convenience as users do not have to remember all security combinations. This type of authentication will not allow hackers to obtain passwords from potential victims or use data stolen as a result of phishing attacks – they will need the owner’s smartphone.

Apple, Microsoft and Google announced that if the smartphone is lost, it will be easy to transfer the passkey token to another device, including the “cloud”.

The launch of the new technology is scheduled for 2023. It will run on Windows, MacOS, iOS, Android, as well as Chrome and Safari browsers. Probably, against the background of the new standard, other companies will catch up with them. For example, Meta with social networks, Twitter and others.