Google makes passkeys default sign-in option in all personal Google accounts

Google has rolled out a new security update that makes passkeys the default sign-in option for personal accounts. The feature is supported by all major web browsers and systems, such as Windows, macOS, iOS, and ChromeOS, and can be set up for every device with Google account.

Google has made passkeys the default sign-in method for all personal Google accounts.
Users can set up passkeys through their Google account.
Passkeys replace passwords with a digital key, letting you sign in with a fingerprint, face scan, or PIN.

Google has announced that passkeys are now the default sign-in option for authentication for all personal Google accounts across its services and platforms. This means that once you set up a passkey linked to a device, users can sign into your Google accounts without entering a password or using 2-Step Verification (2SV) when logging in.

According to Google, passkeys are a simple and secure replacement for traditional passwords. The California-based tech giant first introduced passkeys in May 2022, and then integrated support for them into Android OS and Chrome in October 2022. In May 2023, Google expanded passkey support to personal Google accounts. Notably, Passkeys are compatible with all major web browsers and platforms, including Windows, macOS, iOS, and ChromeOS.

Passkeys are safer than passwords

Google emphases that passkeys offers a more secure alternative to traditional passwords by replacing them with a unique digital key linked to your account. With a passkey, users are not required to memorise passwords. Instead can sign in to their Google Account with Fingerprint, Face scan, Device screen lock, like a PIN. Additionally, passkeys are said to be more effective in protecting Google accounts from threats like phishing.

While passkeys were previously optional, Google has now made them enabled by default. Google is making passwords obsolete by prompting users to create passkeys to unlock accounts and devices with a fingerprint, face scan, or PIN number. “We’ll continue encouraging the industry to make the pivot to passkeys – making passwords a rarity, and eventually obsolete,” Google wrote in its blog post.

However, Google assures that for time being it will continue to support traditional passwords, and users can remove passkeys altogether by disabling their account’s “skip password when possible” option.

How Google passkeys work

Google operate using a cryptographic protocol known as WebAuthn. WebAuthn is a standard protocol that enables websites and apps to authenticate users by utilising the built-in security features of their devices, such as biometrics and PINs.

READ ALSO: 2024 BECE for JHS 3 students: What it is likely to be like

To sign in to a website or app using a passkey, users will first need to create a passkey on their device. Once a passkey has been created, it can be used to sign in to any website or app that supports passkeys.

How to set up passkeys for your Google account

To set up passkeys for your Google account, you will need to follow these steps:

Go to myaccount.google.com
Click Security
Scroll down and click Passkeys
Click Create a passkey and Continue
Follow the on-screen instructions
Unlock your device
Once you have created a passkey, you can use it to sign in to any Google website or app that supports passkeys.

Notably, you will need to create a passkey for each device. When you sign in, your device is asked to sign a unique challenge with the private key.