Passwordless Google accounts are easier and more secure than passwords. Here’s why.

The passkey ecosystem is far from complete, but Google's implementation is now ready to use.

https://arstechnica.com/information-technology/2023/05/passwordless-google-accounts-are-easier-and-more-secure-than-passwords-heres-why/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social

Google passkeys are a no-brainer. You’ve turned them on, right?

The passkey ecosystem is far from complete, but Google’s implementation is now ready to use.

Ars Technica
@arstechnica commenters on the article are reassuring. I'm glad I'm not the only one who thinks passkeys are flawed.
@Wbud @arstechnica flawed in what way? The main issue I see is platform lock-in but both #Bitwarden & #1password has committed support (assuming Apple, Google and Microsoft will let them plug into the browser). Other than that #passkeys is universally a better option than passwords as far as I can see.
@arstechnica Google has taken over the world by making things easy and convenient. Its cool tech but at what cost? Tracking every website you visit? What else do they gleen from you? Also, according to the article, you seem to have no access to your private keys. So does that mean no independent backups? Ekk!

"For people who still don’t want one or more Big Tech companies touching their passkeys, they will soon be able to rely on companies like 1Password......"

WTF! 1Password.... That does not inspire confidence.....
@arstechnica I am amazed at the amount of misinformation people are sharing about perceived negatives of passkeys. Hopefully, it is by bad actors who see this change as an existential threat.

@arstechnica
Thanks for publishing this article. I'm excited about this technology and your article has great info and is timely.

Sadly I could not read this article on your web site due to the intrusive and error-producing presence of ADS. Sorry. I literally tried two different browsers. One of them could not zoom in because it kept snapping back to a certain size that was not readable for me. Both of them totally erased the screen and re-painted the article from the top, super slowly. Video ads that I could not hide or dismiss also caused the experience to suffer, as did the awkward split that caused me to only use the left two-thirds of my screen. I made it a bit past the halfway mark by the time it repainted the whole screen for the 4th time, losing my place. So I'm giving up and just reading what Google Blog has to say about Passkeys now.

@arstechnica great article on a really complex subject. Seems like a step in the right direction. it’s fascinating how much push back there is on a security standard *because* google is supporting it (at least by the ars technica commenterati). That said, half the orgs I interact with are still using sms 2fa so the trailing edge is going to take a long time to catch up.
@arstechnica can’t wait until Google Workspace accounts support it
@robby Same, my main Google access is via Workspace. I did set up a passkey for my gmail.com account, but I don’t use it much so it doesn’t really change anything day-to-day for me.

@dmnelson we have passkey set up for almost everything because we have them behind Okta, but we haven’t put Google Workspace behind it yet.

Google fully adopting it will be huge for Passkeys taking of. 1Password adding support next month is another big one.

@robby Very true, for most people Google is probably going to be the first thing they use—or at least the biggest and most important thing they use—to support passkeys.