This story is part of WWDC 2022, CNET's complete coverage from and about Apple's annual developers conference.
Apple and Google are updating their phone software and web browsers this year with technology called passkeys that's designed to be easy to use and more secure than passwords.
Passwords are plagued with problems, but tech giants have cooperated to design a practical alternative that reduces vulnerabilities and hacking risks.
With the iOS 16 release on Monday, Apple will introduce support for passkeys, a new logon technology that promises to be more secure than passwords at guarding access to our bank accounts and email.Apple demonstrated passkeysat its Worldwide Developers Conference and said they'll come toiOS 16andMacOS Venturathis fall, and they're coming to Google's Android and to web browsers, too.
Passkeys are as easy -- maybe easier -- to use than passwords. They replace the riot of keystrokes needed for passwords with a biometric check on our phones or computers. They also stop phishing attacks and banish the complications of two-factor authentication, like SMS codes, that strengthen the password system's weaknesses.
Once you set up a passkey for a site or app, it's stored on the phone or personal computer you used to set it up. Services like Apple's iCloud Keychain or Google's Chrome password manager can synchronize passkeys across your devices. Dozens of tech companies developed the open standards behind passkeys in a group called the FIDO Alliance, which announced passkeys in May.
"Now is the time to adopt them," Garrett Davidson, an authentication technology engineer at Apple, said in a WWDC talk about passkeys. "With passkeys, not only is the user experience better than with passwords, but entire categories of security -- like weak and reused credentials, credential leaks, and phishing -- are just not possible anymore."
You'll have to spend a little time on the learning curve before passkeys meet their potential. You'll also have to decide whether Apple, Microsoft or Google is the best option for you.
Here's a look at the technology.
It's a new type of login credential consisting of a little bit of digital data your PC or phone uses when logging onto a server. You approve each use of that data with an authentication step, such as fingerprint check, face recognition, a PIN code or the login swipe pattern familiar to Android phone owners.
Here's the catch: You'll have to have your phone or computer with you to use passkeys. You can't log onto a passkey-secured account from a friend's computer without a device of your own.
Passkeys are synchronized and backed up. If you get a new Android phone or iPhone, Google and Apple can restore your passkeys. With end-to-end encryption, Google and Apple can't see or alter the passkeys. Apple has designed its system to keep passkeys secure even if an attacker or Apple employee compromises your iCloud account.
It's pretty simple. Use your fingerprint, face or another mechanism to authenticate a passkey when a website or app prompts you to set one up. That's it.
These steps show how to log on with passkeys on an Android phone: choose the passkey option, choose the appropriate passkey, and authenticate with a fingerprint ID. Face recognition also is an option on compatible phones.
When using a phone, a passkey authentication option will appear when you try to log on to an app. Tap that option, use the authentication technique you've chosen, and you're in.
For websites, you should see a passkey option by the username field. After that, the process is the same.
Once you have a passkey on your phone, you can use it to facilitate login on another nearby device, like your laptop. Once you're logged in, that website can offer to create a new passkey linked to the new device.
You can use a passkey stored on your phone to log onto another nearby device, like a laptop you're borrowing. The login screen on the borrowed laptop will have an option to present a QR code you can scan with your phone. You'll use Bluetooth to ensure your phone and the computer are close by, then let you use a fingerprint or face ID check on your own phone. Your phone then will communicate with the computer over a secure connection to complete the authentication process.
Passkeys employ a time tested security foundation called public key cryptography for login operation. That's the same technology that protects your credit card number when you type it into a website. The beauty of the system is that a website only has to base its passkey record on your public key, data that's designed to be openly visible. The private key used to set up a passkey is stored only on your own device. There's no database of password data that a hacker can steal.
Another big benefit is that passkeys block phishing attempts. "Passkeys are intrinsically linked to the website or app they were set up for, so users can never be tricked into using their passkey on the wrong website," Ricky Mondello, who oversees authentication technology at Apple, said in a WWDC video.
Using passkeys requires that you have your device handy and be able to unlock it, a combination that offers the protection of two-factor authentication but with less bother than SMS codes. And with passkeys, nobody can snoop over your shoulder to watch you type your password.
Passkeys begin emerging this year.
At its Worldwide Developers Conference, Apple said it'll bring passkeys to iOS 16 and MacOS Ventura, its major operating system software updates expected this fall. In May, Google will bring passkey support to Android software by the end of 2022 for developer testing, Google authentication leader Mark Risher said. Passkey support should arrive in Chrome and Chrome OS at the same time. Microsoft plans support in Windows in coming months.
Some websites and apps will be eager to update their login software to use passkeys, so they can take advantage of the security benefits. Others will move more slowly. Even if passkeys catch on fast, don't expect passwords to disappear.
It's unlikely you'll be forced to use passkeys while the technology is new and unfamiliar. Websites and apps you already use will likely add passkey support alongside existing password methods.
If you need to log into a friend's computer that doesn't have your passkey, scanning a QR code will let your phone handle the authentication process.
When you sign up for a new service, passkeys may be presented as the preferred option. Eventually, they may become the only option.
Not exactly. Although passkeys are anchored to one company's technology suite, you'll be able to bridge out of, say, Apple's world to use passkeys with Microsoft's or Google's.
"Users can sign in on a Google Chrome browser that's running on Microsoft Windows, using a passkey on an Apple device," Vasu Jakkal, a Microsoft leader of security and identity technology, said in a May blog post.
Passkey advocates also are working on technology to let people migrate their passkeys from one tech domain to another, Apple and Google say.
Password managers play an increasingly important role in generating, storing and synchronizing passwords. But passkeys will likely be anchored to your phone or personal computer, not your password manager, at least in the eyes of tech giants like Google and Apple.
That could change, though.
"We expect a natural evolution to an architecture that allows third-party passkey managers to plug in, and for portability among ecosystems," Google's Risher said.
He anticipates that passkeys will evolve to lower barriers between ecosystems and to accommodate third-party passkey managers. "This has been a discussion point since early in this industry push."
Indeed, password manager Dashlane is testing passkey support and plans to release it broadly in coming weeks. "Users can store their passkeys for multiple sites and benefit from the same convenience and security they already have with their passwords," the company said in a blog post.
1Password maker AgileBits just joined the FIDO Alliance, andDashLane and LastPass already are members.
See the rest here:
Passkeys, the No-Password Login Tech, Come to iOS 16 on Monday - CNET
- D-Wave Introduces New Fast Anneal Feature, Extending Quantum Computing Performance Gains - Yahoo Finance - April 20th, 2024 [April 20th, 2024]
- Major First: Quantum Information Produced, Stored, And Retrieved - ScienceAlert - April 20th, 2024 [April 20th, 2024]
- Horizon Quantum Computing to Establish First-of-a-Kind Hardware Testbed - The Quantum Insider - April 20th, 2024 [April 20th, 2024]
- Quantum Cloud Computing Secured in New Breakthrough at Oxford - TechRepublic - April 20th, 2024 [April 20th, 2024]
- Quantum Computing Could be the Next Revolution - Fair Observer - April 20th, 2024 [April 20th, 2024]
- Horizon Quantum Computing to Pioneer Multi-Vendor Quantum Hardware Testbed - HPCwire - April 20th, 2024 [April 20th, 2024]
- These 10 quantum computing companies have pulled in the most VC cash - PitchBook News & Analysis - April 20th, 2024 [April 20th, 2024]
- D-Wave Launches Fast Anneal Feature for Enhanced Quantum Computing Performance - Quantum Computing Report - April 20th, 2024 [April 20th, 2024]
- Software Specialist Horizon Quantum to Build First-of-a-Kind Hardware Testbed - HPCwire - April 20th, 2024 [April 20th, 2024]
- Illuminating Futures: Celebrating Achievements and Exploring Quantum Computing at This is IT! Event - Royal Examiner - April 20th, 2024 [April 20th, 2024]
- Horizon Quantum Computing to Establish First-of-a-Kind Hardware Testbed - The Bakersfield Californian - April 20th, 2024 [April 20th, 2024]
- A Weakness in One of the NIST PQC Algorithms Was Not Uncovered After All - Quantum Computing Report - April 20th, 2024 [April 20th, 2024]
- Commodore 64 claimed to outperform IBM's quantum system sarcastic researchers say 1 MHz computer is faster ... - Tom's Hardware - April 20th, 2024 [April 20th, 2024]
- Quantum computing: a new frontier for the broadcast and media industry - RedShark News - April 20th, 2024 [April 20th, 2024]
- 3 Steps Businesses Should Take to Prepare for Quantum Computing Disruption - TechSpective - April 20th, 2024 [April 20th, 2024]
- Orientum Publishes 'Quantum Finance Algorithm' Paper on ArXiv - The Quantum Insider - April 20th, 2024 [April 20th, 2024]
- Quantum Linear Solvers for Redundant Baseline Calibration - AZoQuantum - April 20th, 2024 [April 20th, 2024]
- 'Almost very close' to nuclear weapon: Federal cyber officials brace for quantum computing surprise - Washington Times - April 20th, 2024 [April 20th, 2024]
- D-Wave fast anneal extends quantum computing performance ... - eeNews Europe - April 20th, 2024 [April 20th, 2024]
- Horizon Quantum Computing to Set Up Its Own Hardware Testbed for Tight Integration Between the Hardware and Software Stacks - Quantum Computing Report - April 20th, 2024 [April 20th, 2024]
- Global Quantum Technology Market Research 2024-2029 with Assessment of Companies Focused on Quantum ... - Daily Host News - April 20th, 2024 [April 20th, 2024]
- The experimental demonstration of a verifiable blind quantum computing protocol - Phys.org - April 20th, 2024 [April 20th, 2024]
- Researchers create 'quantum drums' to store qubits one step closer to groundbreaking internet speed and security - Tom's Hardware - April 20th, 2024 [April 20th, 2024]
- Access to burgeoning quantum technology field could be widened by educational model - Phys.org - April 20th, 2024 [April 20th, 2024]
- 'Quantum memory' could make the internet super fast and secure - Futurity: Research News - April 20th, 2024 [April 20th, 2024]
- Senate bill aims to bring more private sector participation to federal AI innovation - Nextgov/FCW - April 20th, 2024 [April 20th, 2024]
- Quantum Computing Leaps Forward with Groundbreaking Error Correction - yTech - April 4th, 2024 [April 4th, 2024]
- Microsoft and Quantinuum Pave the Way for Reliable Quantum Computing - yTech - April 4th, 2024 [April 4th, 2024]
- Breakthrough in Quantum Information Communication Achieved by Tokyo Researchers - yTech - April 4th, 2024 [April 4th, 2024]
- Microsoft Advances in Quantum Computing with Error-Reduction Breakthrough - yTech - April 4th, 2024 [April 4th, 2024]
- Quantinuum H2 Paves the Way for Reliable Quantum Computing - yTech - April 4th, 2024 [April 4th, 2024]
- Why Quantum Computers Will Never Break Bitcoin - Palm Beach Research Group - April 4th, 2024 [April 4th, 2024]
- Microsoft and Quantinuum boast quantum computing breakthrough - DIGIT.FYI - April 4th, 2024 [April 4th, 2024]
- Microsoft and Quantinuum announce breakthrough in quantum computing 14 thousand experiments without errors - ITC - April 4th, 2024 [April 4th, 2024]
- Revolutionizing Quantum Computing: Breakthroughs in Quantum Error Correction - AZoQuantum - April 4th, 2024 [April 4th, 2024]
- Quantum Computing Recharged With Electromagnetic Ion Trap Innovation - SciTechDaily - April 4th, 2024 [April 4th, 2024]
- Next-Generation Quantum Leap Achieved by Microsoft and Quantinuum - yTech - April 4th, 2024 [April 4th, 2024]
- Microsoft and Quantinuum announce development of next-generation technology that reduces 'noise' by 800 times ... - GIGAZINE - April 4th, 2024 [April 4th, 2024]
- BTQ Technologies Corp. Partners with the Australian Quantum Software Network to Advance Quantum Computing and ... - PR Newswire - April 4th, 2024 [April 4th, 2024]
- Quantinuum and Microsoft Leap towards Quantum Superiority with Noise Reduction Breakthrough - yTech - April 4th, 2024 [April 4th, 2024]
- The 3 Best Quantum Computing Stocks to Buy in Q2 2024 - InvestorPlace - April 4th, 2024 [April 4th, 2024]
- What Are the Implications of Quantum Computing for the Future of Data Security? - socPub - April 4th, 2024 [April 4th, 2024]
- Cosmic rays, XR, and 'multiverse' quantum computing welcome to EIC's deeptech Scaling Club - TNW - April 4th, 2024 [April 4th, 2024]
- Wall Street Favorites: 3 Quantum Computing Stocks with Strong Buy Ratings for February 2024 - InvestorPlace - February 26th, 2024 [February 26th, 2024]
- Never-Repeating Tiles Can Safeguard Quantum Information - Quanta Magazine - February 26th, 2024 [February 26th, 2024]
- Fractional Electrons: MIT's New Graphene Breakthrough Is Shaping the Future of Quantum Computing - SciTechDaily - February 26th, 2024 [February 26th, 2024]
- Qubits are notoriously prone to failure but building them from a single laser pulse may change this - Livescience.com - February 26th, 2024 [February 26th, 2024]
- New Phase of Matter Created During Experiments with Exotic Particles in Quantum Processor - The Debrief - February 26th, 2024 [February 26th, 2024]
- Harnessing the Power of Neutrality: Comparing Neutral-Atom Quantum Computing With Other Modalities - The Quantum Insider - February 26th, 2024 [February 26th, 2024]
- Apple is already defending iMessage against tomorrow's quantum computing attacks - The Verge - February 26th, 2024 [February 26th, 2024]
- Government of Canada Supports Xanadu to Accelerate Quantum Computing Research and Education - HPCwire - February 26th, 2024 [February 26th, 2024]
- U.S. weighs National Quantum Initiative Reauthorization Act - TechTarget - February 26th, 2024 [February 26th, 2024]
- The Current State of Quantum Computing - Securities.io - February 26th, 2024 [February 26th, 2024]
- Superconducting qubit promises breakthrough in quantum computing - Advanced Science News - February 26th, 2024 [February 26th, 2024]
- Quantum Computing Breakthrough: New Fusion of Materials Has All the Components Required for a Unique Type of ... - SciTechDaily - February 26th, 2024 [February 26th, 2024]
- 3 Quantum Computing Stocks That Could Be Multibaggers in the Making: February Edition - InvestorPlace - February 26th, 2024 [February 26th, 2024]
- DCD Podcast - The fundamentals of quantum computing, with Yuval Boger, QuEra - DCD - DatacenterDynamics - February 26th, 2024 [February 26th, 2024]
- Apple to launch PQ3 update for iMessage, bolstering encryption against quantum computing - ReadWrite - February 26th, 2024 [February 26th, 2024]
- Illinois governor's proposed $53B budget includes funds for migrants, quantum computing and schools - The Associated Press - February 26th, 2024 [February 26th, 2024]
- How is Quantum Technology Developing in Ireland? A Conversation with John Durcan, IDA Ireland - AZoQuantum - February 26th, 2024 [February 26th, 2024]
- Quantum Poker: The States of Colorado and Illinois are Betting on Quantum - Quantum Computing Report - February 26th, 2024 [February 26th, 2024]
- One of those transformational investments: $15M brings quantum computing to SC - WIS News 10 - February 26th, 2024 [February 26th, 2024]
- Apple is future-proofing iMessage with post-quantum cryptography - Cointelegraph - February 26th, 2024 [February 26th, 2024]
- Singapore warns banks to prepare for quantum computing cyber threat - Finextra - February 26th, 2024 [February 26th, 2024]
- New Superconducting Flowermon Superconducting Qubit Designed to Greatly Increase Coherence Times - Quantum Computing Report - February 26th, 2024 [February 26th, 2024]
- Apple Ramps Up iMessage Security to Fight Looming Quantum Computing Threat - PCMag - February 26th, 2024 [February 26th, 2024]
- IONQ Stock Outlook: Why This Quantum Computing Play Could Be a Long-Term Winner - InvestorPlace - February 26th, 2024 [February 26th, 2024]
- Apple future-proofing iMessage to protect against the scary future of quantum computing hacking - TechRadar - February 26th, 2024 [February 26th, 2024]
- Apple to upgrade iMessage with measures against future quantum computing hacking - The Indian Express - February 26th, 2024 [February 26th, 2024]
- FedDev Ontario invests $17 million in 12 companies to advance quantum computing - IT World Canada - February 26th, 2024 [February 26th, 2024]
- Apple Bolsters iMessage Encryption Amid Quantum Computing Threats - Telecom Lead - February 26th, 2024 [February 26th, 2024]
- The 3 Most Undervalued Quantum Computing Stocks to Buy in January - InvestorPlace - January 21st, 2024 [January 21st, 2024]
- The Week's 10 Biggest Funding Rounds: Quantinuum And Flexport Lock Up Huge Rounds - Crunchbase News - January 21st, 2024 [January 21st, 2024]
- US users top list after Chinas state-of-the-art quantum computer goes global - South China Morning Post - January 21st, 2024 [January 21st, 2024]
- Mitsui to invest in Quantinuum, a leading global quantum computing company, and sign a distributorship agreement for ... - Mitsui - January 21st, 2024 [January 21st, 2024]
- Breakthrough in quantum computing with stable room temperature qubits - Advanced Science News - January 21st, 2024 [January 21st, 2024]
- Why IONQ Is Not a Stock to Buy (Yet) - InvestorPlace - January 21st, 2024 [January 21st, 2024]
- Davos and the global state of quantum - POLITICO - January 21st, 2024 [January 21st, 2024]
- High-Frequency Transactions: Collaborating with Quantum AI? Features Film Threat - Film Threat - January 21st, 2024 [January 21st, 2024]
- Quantum Computing: Revolution on the Horizon? | by Shan | Jan, 2024 - Medium - January 21st, 2024 [January 21st, 2024]