Ib tug Passwordless yav tom ntej tej zaum yuav xav kom peb cov xov tooj yog Security Keys

Cov txheej txheem:

Ib tug Passwordless yav tom ntej tej zaum yuav xav kom peb cov xov tooj yog Security Keys
Ib tug Passwordless yav tom ntej tej zaum yuav xav kom peb cov xov tooj yog Security Keys
Anonim

Key Takeaways

  • Lub FIDO Alliance tau tshaj tawm ib daim ntawv dawb tshuaj ntsuam xyuas qhov tsis txaus uas tiv thaiv nws tus qauv kev lees paub tus password tsis tau los ua qhov tseem ceeb.
  • Passwordless authentication mechanisms tau ua tsis tiav los hloov tus password vim tias lawv tsis yooj yim, daim ntawv dawb qhia.
  • Nws tawm tswv yim siv cov xov tooj smartphones ua cov yuam sij kev nyab xeeb.

Image
Image

Cov passwords muaj zog tsis yooj yim los tsim thiab tswj, tab sis ntxiv cov kauj ruam ntxiv thiab cov khoom siv rau cov txheej txheem kev lees paub yog qhov mob taub hau loj dua.

Qhov ntawd yog qhov xaus ntawm daim ntawv dawb los ntawm Fast ID Online Alliance (FIDO), uas tau liam tias muaj teeb meem siv tau rau kev tiv thaiv tus password tsis muaj kev lees paub los ntawm qhov tseem ceeb. Txawm li cas los xij, kev sib koom tes tau los daws qhov teeb meem ib zaug thiab rau tag nrho thiab ua rau FIDO authentication standard raws li ubiquitous li passwords.

"FIDO tau tshaj txhua qhov kev cia siab thawj zaug," Bill Leddy, VP ntawm Cov Khoom ntawm LoginID, hais rau Lifewire dhau email tom qab siv daim ntawv dawb. "[Nws] yog qhov ze tiag tiag los daws txhua qhov kev lees paub [qhov teeb meem], tab sis xav tau me ntsis ntxiv."

Canceling Passwords

Leddy ntseeg tias cov passwords tau dhau los siv lawv. Nws liam tias kev lag luam kev ruaj ntseg ua rau tib neeg ua tsis tiav los ntawm kev thawb cov kev xaiv tsis muaj zog rau ntev heev.

"Passwords tam sim no muaj hnub nyoog 60 xyoo tab sis tseem yog qhov kev xaiv pov thawj tseem ceeb rau feem ntau cov nyiaj. Qhov ntawd tsis yog ib qho kev daws teeb meem, "hais Leddy. Nws hais ntxiv tias niaj hnub no hauv is taws nem, qhov chaw uas cov vev xaib tuaj yeem ua tau yooj yim cloned, kev lag luam kev ruaj ntseg txoj hauj lwm yog los pab cov neeg nrog cov cuab yeej tsim nyog los tiv thaiv kev ua txhaum tus account.

Lub FIDO Alliance, lub koom haum qhib kev lag luam, tsim los txo qhov kev cia siab ntawm cov passwords, tau ua haujlwm txog qhov teeb meem no txog li kaum xyoo tam sim no. Nws tau tsim FIDO authentication tus qauv, uas tsis muaj peev xwm nce traction. Nyob rau hauv daim ntawv dawb, lub koom haum xav tias nws thaum kawg tau txheeb xyuas qhov ploj ntawm daim duab dhos ua si thiab kuj tau piav qhia txog lub tswv yim los kov yeej nws.

Raws li kev sib koom ua ke, FIDO qhov kev lees paub tus password tam sim no muaj cov teeb meem siv tau uas tau ua kom nws tsis txhob ua tiav kev saws loj.

[Peb] tau pom muaj kev txwv tsis pub siv [hauv qhov chaw neeg siv khoom], vim tias pom qhov tsis yooj yim ntawm cov yuam sij kev nyab xeeb ntawm lub cev (yuav, sau npe, nqa, rov qab), thiab cov teeb meem cov neeg siv khoom ntsib nrog cov ntawv pov thawj platform (e.g., yuav tsum rov sau npe rau txhua lub cuab yeej tshiab; tsis muaj txoj hauv kev yooj yim kom rov qab los ntawm cov khoom ploj lossis raug nyiag lawm) ua qhov thib ob, " daim ntawv sau tseg.

Txhawm rau kov yeej cov teeb meem, daim ntawv dawb hu rau kev siv peb lub xov tooj smartphones li roaming authenticators lossis portable security keys.

"Ib tus neeg siv lub cuab yeej ua tus txheeb xyuas qhov tseeb yog qhov kev paub zoo ntawm cov neeg siv thiab muaj kev nyab xeeb ntau dua li lo lus zais ntawm cov khoom siv ib nrab ntseeg tau yog ua tiav. yog qhov kev xaiv zoo, "pom Leddy.

Txoj Kev Mus Rau

Txawm li cas los xij, daim ntawv dawb qhia tias rau cov xov tooj ntawm tes kom ua tiav raws li cov yuam sij kev nyab xeeb, FIDO yuav tsum tsim cov txheej txheem du rau tib neeg ntxiv lossis hloov ntawm lawv cov khoom siv mobile.

Nws sib cav tias yog tias cov txheej txheem rau cov haujlwm tseem ceeb, xws li teeb tsa lub xov tooj tshiab lossis hloov mus rau lub xov tooj tshiab, tsis ncaj, ces tib neeg yuav tso tseg tag nrho lub tswv yim vim tias tsis yooj yim. Txhawm rau zam qhov no, daim ntawv thov qhia txog cov txheej txheem tshiab uas lawv hu ua ntau lub cuab yeej FIDO daim ntawv pov thawj, lossis "passkeys."

"Multi-device 'passkey' daim ntawv pov thawj hais txog cov lus nug ntev nyob ib puag ncig FIDO. Cov lus nug tau hloov mus rau lub cuab yeej tshiab yog tias kuv tau tso npe 50 daim ntawv pov thawj tshwj xeeb ntawm kuv lub cuab yeej qub thiab tom qab ntawd tau txais ib qho tshiab Tsis muaj leej twg xav mus los ntawm kev rov qab los ntawm tus account rau 50 qhov kev pabcuam sib txawv los thim rov qab cov ntaub ntawv pov thawj FIDO tshiab, " piav qhia Leddy.

Image
Image

FIDO lees tias cov ntawv hla yuav pab zam qhov xwm txheej no tag nrho los ntawm kev ua kom ntseeg tau tias thaum peb hloov ntawm ib lub cuab yeej mus rau lwm qhov, peb daim ntawv pov thawj FIDO twb nyob tos peb. Tau kawg, daim ntawv no yog lub tswv yim, thiab Leddy xav tias cov txheej txheem no yooj yim dua los tawm tswv yim dua li kev siv.

"Nws yuav tsis muaj hmoo yog tias cov kev daws teeb meem passkey yog cov neeg muag khoom tshwj xeeb kom tus neeg siv khoom tsis tuaj yeem hloov ntawm cov tuam txhab tsim khoom lossis txawm tias muaj ntau yam (MacBook thiab Android xov tooj) cov khoom siv," ceeb toom Leddy.

Txawm li cas los xij, nws ntseeg siab tias FIDO kev sib koom tes, uas suav cov hnyav hnyav xws li Apple, Meta, Google, PayPal, Wells Fargo, American Express, thiab Bank of America, ntawm nws cov tswv cuab, yuav los nrog cov kev daws teeb meem uas tsis yog. t tsuas yog universal tab sis kuj ua tib zoo soj ntsuam tawm tsam kev tawm tsam.

FIDO ntseeg tias ntau lub cuab yeej FIDO cov ntaub ntawv pov thawj yuav dhau los ua tus ntsia hlau zaum kawg hauv lub hleb rau lo lus zais. "Los ntawm kev qhia txog cov peev txheej tshiab no, peb vam tias yuav txhawb nqa cov vev xaib thiab cov apps kom muaj qhov kawg-rau-kawg tiag tiag kev xaiv tsis muaj password; tsis muaj tus password lossis ib zaug passcodes (OTP) yuav tsum tau," said the alliance.

Pom zoo: