Apple, Google and Microsoft kick off password-free sign-in era

As part of the joint agreement, giant technology companies have pledged to launch and maintain a single standard for Internet authorization. The standard was developed by the FIDO Alliance and the World Wide Web Consortium.

Apple said in a statement, “This will enable websites and apps to provide a consistent, secure and easy password-free sign-in experience for users across devices and platforms. ” used the expressions. According to experts, password-only authentication on the Internet is seen as one of the biggest security problems.

Mark Risher, senior director of product management at Google, “This milestone is the result of a collaborative industry-wide effort to improve security and move away from legacy password-based authentication.” said.

How will passwordless login work?

This authentication process will be secured by a unique encryption key transferred between the smartphone and the website. To access the site, users will be asked to unlock their smartphones as normal – with a fingerprint, facial recognition, pattern or PIN code. Thus, the login process can be performed without the need to enter a password.

This technology will prevent phishing attacks and will be more convenient and secure than two-factor authentication or authentication technologies via SMS. It was stated that if the smartphone is lost, the encryption key can be easily synchronized with another device from the cloud.

Also, these encryption keys will be asymmetric. This means that when attackers hack a site, they will only be able to gain access to a portion of the encryption key, which means that it poses no threat to users. The only remaining method for hacking is to seize the account holder’s smartphone. The launch of the new technology is scheduled for 2023.