Google users can now sign into their accounts with a passkey, the company announced on Wednesday. On the same day, Dashlane announced that it is set to roll out passwordless login for users later this year.
Passkeys, which Google helped to develop alongside the FIDO Alliance, is fast becoming a global standard. It is regarded as the successor to traditional passwords and two-factor authentication.
Passkeys eliminate the need for passwords and thus mitigate password-related cybersecurity risks. To sign in to an account with a passkey, you need to add a trusted device. Once that’s done, you can log in to your account using the same actions you use to unlock the trusted device (i.e., a PIN code or biometrics).
“Starting today, you can create and use passkeys on your personal Google Account,” Google said in a blog post. According to Google, passkeys work with all major browsers and platforms.
While Dashlane’s new “phishing-resistant” passwordless login option is not based on the FIDO Alliance’s passkeys, it works the same way. Users can log in to their accounts with a PIN code or biometric authentication.
Dashlane CPO Donald Hasson told The Verge that the company didn’t go with passkeys because “it just wasn’t quite ready.”
Google’s Passkey Authentication, Dashlane’s Plans
When users choose to sign in to Google with a passkey, the company will no longer ask for passwords or two-factor authentication. Passkeys only exist locally on users’ devices, meaning neither Google nor other any third party can access them. This bolsters data privacy and curbs phishing attacks designed to swipe passwords.
“When you create one [a passkey], the corresponding public key is uploaded to Google. When you sign in, we ask your device to sign a unique challenge with the private key. Your device only does so if you approve this, which requires unlocking the device. We then verify the signature with your public key,” Google explained.
Passkeys are compatible with newer hardware, such as Apple iPhone iOS 16 and devices running on Android 9 or newer. They can be shared with nearby devices using a QR code and Bluetooth technology via services like Apple iCloud and password management software like 1Password and Dashlane.
If a trusted device gets lost, users can “immediately revoke the passkey” in their account settings and remotely wipe it from the device, Google said. “We always recommend having a recovery phone or email on your account, as it increases the chances of recovering [the passkey] in case someone gains access,” Google explained.
Dashlane’s new passwordless login option eliminates the need for a master password. This will make accessing your stored passwords easier. And, if you lose your device, you can regain access to your account with a recovery key, the company said in a blog post.
Dashlane already supports passkeys. The company said it is “working on additional support for passkeys to help users seamlessly log in to other apps and websites.”
Dashlane is not the first password manager to support passkeys. 1Password has also announced plans to add support for passkeys to its desktop app and browser extension later this year.
Is Passwordless Login Safer?
Passwords and multi-factor authentication do not protect users “against phishing attacks and targeted attacks like “SIM swaps” for SMS verification,” Google explained.
“Passkeys help address all these issues,” it added.
Google is the latest tech behemoth to announce support for passkeys. Microsoft added support for passkeys in 2021, and Apple introduced passkeys with iOS 16. Other popular companies, like PayPal, have also announced support for passkeys.
A recent survey by 1Password revealed that 58% of North Americans are ready to ditch passwords, and most respondents said they would consider using passkeys.
VPNOverview recommends upgrading to passkeys if your device supports this authentication method, as it’s safer and more user-friendly. You can also opt for hardware-backed passkeys like YubiKey.
Until passwordless login becomes a universal standard, we recommend creating secure passwords and storing them safely with a password manager. We’ve conducted extensive tests and created a list of the five best password managers.
