Google announces passwordless by default: Make the switch to passkeys

Re:Google announces passwordless by default: Make the switch... by jkaplowitz on Tuesday October 10, 2023 @11:20AM (#37833206)

I think you’ll still need a password on your account for cases where no passkey is available, and possibly for other scenarios of heightened fraud risk. That’s why the setting they’re describing in the blog post is named “Skip password when possible”.

Disclaimer: although I worked for Google many years ago in a role entirely unrelated to Google account authentication, I have no inside info on this announcement, could be wrong about what I say in the first sentence of this comment, and am not speaking for Google here.

[ Parent | on HN ]

Re:Google announces passwordless by default: Make the switch... by goosedragons on Tuesday October 10, 2023 @11:22AM (#37833249)

I think there's going to be an issue with people forgetting passwords they lasted used 5 years ago. Recovery needs to be much better thought out.

[ Parent | on HN ]

Re:Google announces passwordless by default: Make the switch... by jkaplowitz on Tuesday October 10, 2023 @12:11PM (#37834027)

I agree that recovery is an important question. Maybe they will make sure to prompt for a password at least every N months? I have no idea what their answer for this may be, but they probably have one.

[ Parent | on HN ]

Re:Google announces passwordless by default: Make the switch... by vdelitz on Tuesday October 10, 2023 @11:32AM (#37833432)

I also think that for sign-ups you still need a password for a while (simply as a fallback)

[ Parent | on HN ]

Re:Google announces passwordless by default: Make the switch... by skarra on Tuesday October 10, 2023 @02:59PM (#37836027)

You're spot on. And I work on the Google authentication team right now :)

[ Parent | on HN ]