Google Advanced Protection Program Adds Single Passkey Set-Up Option

[AppleTO]

Haven't heard this. Can you supply some examples?

I have a bunch of food ordering apps on my phone that do this, including recently McDonalds. Uber as well.

Shopify also does this on any store that use their new user account platform.

I'm sure we will see many more. Can't hack a password that doesn't exist.

 

[frankly]

I have tried to set up a passkey on a few sites and have yet to have the setup work successfully. The process has either failed before it finished or the site said it set up the passkey, but then when I tried to login with the passkey, it said I didn't have one set up on the account.

 

[mejsric]

The problem with all these security measures is either they allow an alternate way in case your primary method fails or you risk losing your account. Often the alternate method is something weak like SMS two factor.

my friend youtube account (1k subs) just recently hacked last day by stealing cookies, and the hackers change everything.. loging frequent use device/network wont work. and stupid google has no support.

 

[svish]

Good to see this change.

 

[russell_314]

my friend youtube account (1k subs) just recently hacked last day by stealing cookies, and the hackers change everything.. loging frequent use device/network wont work. and stupid google has no support.

They steal the whole session token. 2FA won’t help in that scenario. it’s usually by opening an infected attachment in an email. The best advice for this person is use a separate account for email and a separate device to read these emails. Obviously one that’s not logged into the YouTube account. A Chromebook is a great choice for such a device since it’s pretty locked down.

 

[HDFan]

I have a bunch of food ordering apps on my phone that do this, including recently McDonalds. Uber as well.

Don't follow. I have to login to both of those apps.

 

[AppleTO]

Don't follow. I have to login to both of those apps.

View attachment 2396428

When I select “continue with email” it sends me an email rather than asking for a password.

 

[HDFan]

it sends me an email rather than asking for a password.

See your point. A different way to authenticate.