Whistleblower warning: 2FA codes sent via SMS are trivially easy to intercept
Apps or physical authenticators are a better choice
Authentication articles
OneDrive File Picker flaw grants full drive access when users share a single file
Careless Microsoft security puts OneDrive users at serious risk
Valve confirms Steam 2FA leak affecting 89 million users, no passwords compromised
Steam wasn't hacked, but you should probably start using the authenticator app anyway
Sam Altman's World brings iris-scanning digital ID to the US
Orb scanners promise "proof of humanity"
New Microsoft login screens emphasize passkeys and "passwordless" authentication
What just happened? Despite still being one of the most popular login methods, developers are gradually replacing passwords with newer, more robust authentication technologies. The "next generation" of online security is coming slowly but steadily, and Microsoft has now decided there is room for a significant redesign of the entire login experience.
Are Passwords Dead? What Are Passkeys, and Why Everyone's Talking About Them
Tired of forgetting passwords and getting locked out of your accounts? Passkeys offer a simpler, safer way to log in---no passwords, no frustration, just a quick scan or tap on your device.
New Android feature seamlessly transfers account credentials to new devices
Forward-looking: When users replace or upgrade an iPhone or iPad, login credentials usually transfer automatically, allowing customers to resume using their favorite apps and services immediately. In contrast, Android devices force users to log back into their apps manually, which can become tedious and time-consuming. A new feature for Android developers aims to remedy this annoyance.
Google Pixel 11 face unlock could rival iPhone's Face ID with nighttime capabilities
The under-screen fingerprint scanner is decent, but Google wants more
NIST standards proposal looks to retire outdated requirements like mandatory password resets
Rules regarding the use or limitation of specific characters are also on the chopping block
Newly discovered flaw makes some YubiKeys vulnerable to cloning
All YubiKey models running firmware prior to version 5.7 are affected
The NFL is implementing facial authentication across all stadiums (updated)
Fans are not a part of the program, they will have their tickets scanned as normal
Spotify is adding two-factor authentication to everyone
A security update gradually rolling out to music streaming fans
Selfie-based authentication is on the rise, alarming security experts
It's convenient, but the data can be misused
MIT's minuscule terahertz RFID tag foils counterfeiters with metallic glue
System authenticates articles with better than 99 percent accuracy
X/Twitter iPhone app adds passkey support for more secure logins
Passkeys are more secure than passwords, but developer support has so far been limited
Google OAuth secrets exposed as account-hijacking MultiLogin vulnerability discovered
A secure authentication standard that isn't so trustworthy, after all
Amazon One contactless palm-payment system coming to all Whole Foods this year
Palm scanner uses an image of the customer's palm and underlying vein structure
Windows 11 preview adds biometric logins for apps and websites
Windows 11 enables FIDO passkeys for passwordless authentication
Google Authenticator gets cloud 2FA code backups, doesn't yet provide end-to-end encryption
Facepalm: Google has finally implemented a cloud backup option for one-time access codes (OTP) stored in its Authenticator mobile app. The feature can provide users with additional convenience and confidence, but right now it lacks a critical security protection as those backups aren't encrypted.
Twitter's SMS two-factor authentication is now a paid feature
Non-subscribers will still have access to 2FA via authentication apps and security keys
Google brings passwordless logins to Android and Chrome
Android and Chrome step up their support for the FIDO Alliance
1Password can now store 'Sign in with Google' and other SSO services for automatic authentication
The push for a passwordless internet continues
iOS 16 and macOS Ventura will let users bypass CAPTCHAs on supported apps and websites
Security and convenience with Automatic Verification
LastPass Authenticator now lets you go passwordless
Using your phone's biometric security, LastPass Authenticator can be used to access your password vault on your desktop PC and replace the usual master password login.
Apple 'passkeys' support in macOS Ventura and iOS 16 promise a passwordless future
It's a feature on Apple devices, but works cross-platform