Google this week said it is rolling out an update for its users that it describes as “the beginning of the end of the password.”
Known as “passkeys,” the tech giant wrote that “passkeys for Google Accounts are available” starting this week. Google also suggested that passwords may eventually be phased out for its products, including Gmail and YouTube.
“Of course, like any new beginning, the change to passkeys will take time. That’s why passwords and 2SV will still work for Google Accounts. We look forward to helping people, and others in the industry, take this next leap to make signing in easier and safer with Google,” the company wrote in a post.
The company said that the passkey technology will allow billions of Google users to sign into its websites and apps the same way they unlock a device. That’s through a fingerprint, face scan, or a device PIN that can verify their identity.
Services such as Docusign, Kayak, PayPal, Shopify, and Yahoo! Japan have already deployed the technology. Google has claimed that the keys are more secure than passwords and resist cyberattacks such as phishing or brute force attacks.
Google account holders can set up passkeys for their Google accounts by logging in to g.co/passkeys and following the company’s instructions. Business service Google Workspace accounts will “soon” get the option to enable passkeys for users, the company said.
Earlier this year, Apple, too, announced it would be switching to passkeys and will eventually remove passwords in general.
Criticism
One security researcher, Anthony Lawrence, noted that proclamations of a “password-free future” may be overblown and won’t happen for years to come. He also noted that because of the technology involved in passkeys, websites will have to retain existing passwords.
