Apple just patched a critical macOS flaw that let hackers break in without a password
The Screen Sharing flaw, rated 9.8 out of 10 in severity, was already being exploited in the wild
Authentication articles
Microsoft is killing off SMS login codes, citing AI-powered hacking
Microsoft Entra ID to phase out SMS authentication on February 1
Google now lets you sign into your account using a selfie video
A last resort when users can't access passwords or passkeys
The Netherlands just blocked a US company from buying the app Dutch citizens use for everything
Europe is building walls around its digital infrastructure
Microsoft is pulling the plug on SMS codes, wants you to switch to passkeys
The future of login is "passwordless, secure, and user-friendly"
How Apple Pay Works: The Tech Behind
Apple Pay makes contactless payments feel effortless, but behind that two-second tap is a surprisingly sophisticated chain of cryptography, tokenization, and real-time authorization.
Android wants to replace email verification codes with one-tap credentials
Editor's take: Google is once again trying to simplify something that was already fairly easy and convenient. Mountain View's latest target is email-based authentication, which is now dropping the email-checking step altogether thanks to a new Android API update.
Windows 11 now works with 1Password and Bitwarden passkeys, with more to come
Windows is finally letting you use whatever passkey manager you want
Boot up, VPN, multi-password logins, and zero pay: Bank of America hit with wage lawsuit
Bank of America accused of making remote workers log in for free before shifts even start
Dropbox is shutting down its password manager next month – here are the best alternatives
1Password has an easy import function, but we also recommend Bitwarden and Proton Pass
Whistleblower warning: 2FA codes sent via SMS are trivially easy to intercept
Apps or physical authenticators are a better choice
OneDrive File Picker flaw grants full drive access when users share a single file
Careless Microsoft security puts OneDrive users at serious risk
Valve confirms Steam 2FA leak affecting 89 million users, no passwords compromised
Steam wasn't hacked, but you should probably start using the authenticator app anyway
Sam Altman's World brings iris-scanning digital ID to the US
Orb scanners promise "proof of humanity"
New Microsoft login screens emphasize passkeys and "passwordless" authentication
What just happened? Despite still being one of the most popular login methods, developers are gradually replacing passwords with newer, more robust authentication technologies. The "next generation" of online security is coming slowly but steadily, and Microsoft has now decided there is room for a significant redesign of the entire login experience.
Are Passwords Dead? What Are Passkeys, and Why Everyone's Talking About Them
Tired of forgetting passwords and getting locked out of your accounts? Passkeys offer a simpler, safer way to log in---no passwords, no frustration, just a quick scan or tap on your device.
New Android feature seamlessly transfers account credentials to new devices
Forward-looking: When users replace or upgrade an iPhone or iPad, login credentials usually transfer automatically, allowing customers to resume using their favorite apps and services immediately. In contrast, Android devices force users to log back into their apps manually, which can become tedious and time-consuming. A new feature for Android developers aims to remedy this annoyance.
Google Pixel 11 face unlock could rival iPhone's Face ID with nighttime capabilities
The under-screen fingerprint scanner is decent, but Google wants more
NIST standards proposal looks to retire outdated requirements like mandatory password resets
Rules regarding the use or limitation of specific characters are also on the chopping block
Newly discovered flaw makes some YubiKeys vulnerable to cloning
All YubiKey models running firmware prior to version 5.7 are affected
The NFL is implementing facial authentication across all stadiums (updated)
Fans are not a part of the program, they will have their tickets scanned as normal
Spotify is adding two-factor authentication to everyone
A security update gradually rolling out to music streaming fans
Selfie-based authentication is on the rise, alarming security experts
It's convenient, but the data can be misused