Revolutionizing Online Security: Say Goodbye to Passwords
Written on
Chapter 1: The Problem with Passwords
Passwords have long served as the primary means of accessing our online accounts. However, many users neglect additional security measures such as two-factor authentication (2FA), leaving their accounts vulnerable to hackers. In fact, a staggering 90% of Google account holders do not use such protective steps, making them easy targets.
Passwords are often weak and reused, making it simple for cybercriminals to access personal information. Surprisingly, these attackers may not even need your password. Modern computing power allows them to break weak passwords through brute force methods. For instance, a six-character password can be cracked in just five seconds, while an eleven-character password might take 400 years, and an exceptionally strong fifteen-character password could resist attack for up to 15 billion years. Each additional character increases the time required to crack the password exponentially.
But the question remains: how long can we rely on complex, hard-to-remember passwords for our digital security? Password managers may assist in managing these passwords, but entering a long string of characters on a device you don’t own can be cumbersome.
What’s the alternative? Consider the convenience of logging into WhatsApp Web, where a QR code appears on the screen, allowing you to log in without a password.
Solution — Apple Passkey
Apple recently unveiled an innovative Passkey feature at WWDC22, which aims to redefine how we authenticate ourselves online. Passkeys are WebAuthn credentials that Apple enhances with backup, synchronization, and sharing capabilities for trusted contacts. These credentials can be seamlessly synced across various Apple devices via iCloud Keychain, simplifying the login process to a mere tap in most cases.
The best part? Passkeys cannot be leaked like traditional passwords, nor can they be phished, as they never leave your device.
To sign in with a Passkey, simply tap on "Sign in," and you'll be prompted for Face ID or Touch ID authentication, resulting in an immediate login.
What are Passkeys? | Are Passwords Dead? | A Security Expert Explains
This video explores the concept of Passkeys and discusses the potential demise of traditional passwords, offering insights from a security expert.
Signing in on a Friend’s Device
If you find yourself needing to log in on a friend’s device or at a public terminal, the process is just as straightforward. After selecting "Sign in," choose the option for iPhone, iPad, or Android. A QR code will appear, which you can scan with your personal device for seamless access.
This method requires Bluetooth to be enabled on both devices, ensuring you are physically present. Moreover, this process does not necessitate internet access on your personal device, as it is strictly for authentication purposes.
Can Passkeys be Shared?
Switching to Passkeys does not mean relinquishing the ability to share accounts. You can share your Passkeys exclusively via AirDrop, allowing someone else to log in when you’re not around.
It would be beneficial if Apple eventually allows sharing through iMessage or email, particularly if the other person is not within AirDrop range.
Conclusion: A Password-less Future
Passkeys adhere to robust W3C standards, making them highly secure, discreet, and unpredictable. With the introduction of Passkeys, a future devoid of passwords seems imminent. Numerous websites are already integrating Passkey technology as an alternative login method, particularly following the public release of iOS 16.
Apple's NEW Passwords app (+ why I'm NOT using it)
This video discusses Apple's new Passwords app and the presenter's reasons for not utilizing it, offering a critical view of password management in the modern age.
The era of passwords may soon be over, marking the end of an era in online security.