Apple, Microsoft and Google to Implement Passwordless Login by 2023
American technology companies Apple, Microsoft and Google announced that within a year they will introduce a single standard for passwordless authorization on their platforms, including on websites. This is stated in a joint statement published on the website of the FIDO Alliance, an industry association that creates authentication standards.
It follows from the message that the companies' platforms will begin to support the passwordless online authentication protocol developed by FIDO and the World Wide Web Consortium. So, users will be able to choose their smartphone as the main authentication device, after which they will be able to enter applications, websites and other digital services by biometric scanning or entering the PIN code of the mobile device.
The security of this authentication process will be provided by a unique cryptographic passkey token that is transferred between the smartphone and the website. Such encryption keys will be asymmetric. This means that if attackers gain access to one part of the token as a result of a site hack, there will be no threat to users. "This new approach protects against phishing and sign-in will be significantly more secure than passwords and legacy multifactor technologies such as one-time passcodes sent via SMS," the joint statement said.
Apple, Microsoft and Google stressed that the passkey token will be easy to transfer to another device, including from the "cloud" in case of loss of a smartphone. The possibility of password-free authorization should appear in Windows, macOS, iOS, Android, as well as Chrome and Safari browsers before the end of 2023, specified in FIDO.