Google is Trying to ditch Passwords.

[Arty]

Google is trying to get rid of the human error component of passwords. By doing so they are making it like 2 step where you use your phone, but the difference is, you just unlock and hit accept. Private Beta Program Currently it worked by typing in email then get notification on phone. It will be optional.

If you loose your phone you sign in password and deactivate it.

http://www.telegraph.co.uk/technology/google/12066225/Google-replaces-passwords-with-your-phone-itself.html

Passwords are the bane of modern tech - not only are good ones hard to come up with, but they also have to be constantly changed, could be the targets of phishing attacks and have inane rules about letters, characters and numbers that are impossible to remember. Which is why most people use simple, easy-to-recall passwords, or recycle the same old ones for several different accounts - as this report from security firm Kaspersky claimed 1 in 7 people do.

Google wants to end that. This week they rolled out trials for a new log-in system that does away with passwords entirely. Instead, you can log in securely to your Google account - including Gmail, YouTube etc - just by tapping "Yes" on your iOS or Android smartphone.

A Google spokesperson said: “We've invited a small group of users to help test a new way to sign-in to their Google accounts, no password required. 'Pizza', 'password' and '123456'—your days are numbered.”

Reported on Reddit by user Rohit Paul, with screenshots of how to use it on a Nexus 6P, the process is straightforward. Here's how it worked, according to Paul:

First, set up your phone to act as a sign-in authenticator (it needs to have a screen lock which is how it is encrypted)

Go to a Google log-in screen on your computer and put in your email

Unlock your smartphone, and just tap Yes on the Google notification asking if you're trying to sign in

If your phone is lost or stolen, you can sign in to your account using your regular password, and un-authorise the stolen phone from signing in.

Currently, Googe offers 2-factor authentication, which involves putting in your password, as well as a numerical code that appears as a text or in an app on your phone. This new method would save the effort of putting in the code, but would be equally as secure.

When Paul tried it a second time, he was asked to complete another step on his mobile phone - enter a two-digit number after clicking yes.

 

This isn't the first security or phishing-protection mechanism that Google has implemented.

This year, it introduced Password Alert which is a simple Chrome extension that will show you a warning if you type your Google password into a site that isn’t a Google sign-in page.

It has also tested "on-body detection" in its Android 5.1 version which only locks when the phone has been put down, but remains unlocked if you've got it in your hand - measured by the phone's accelerometers.

Google said it could not comment on when the feature might be rolled out more widely.

 

I think this is an interesting way to move forward, especially since everyone carries their phones with them

only problem i see is most of the population if they got this feature would forget their actual password.....

Edited December 23, 2015 by GoodBytes

[Aytex]

but not everyone has phones

smarthphones to be exact...

[ThinkWithPortals]

Huh, interesting. I don't think I'd use it, but good to know.

[Arty]

but not everyone has phones

smarthphones to be exact...

its obs gonna be optional....like 2 step......

and you don't make the rule because of the expection.

[minibois]

Interesting. Already using 2step verification for my Google account, so this would be a step easier

Their are some security things Google needs to think about though, like being able to easily and quickly turn off this setting (in case  your phone gets stolen), but I am sure they will think about this

[royalcrown]

So if I find this "ditch" as you call it and dig, I'll have all Google's passwords...must google cheapest shovel now ?

[terrytek]

i don't even have a smartphone how is this gonna work

[Arty]

Interesting. Already using 2step verification for my Google account, so this would be a step easier

Their are some security things Google needs to think about though, like being able to easily and quickly turn off this setting (in case  your phone gets stolen), but I am sure they will think about this

i mean your phone also has a password on it 

but it says you can sign in withyour password then disable the phone.

 

 

So if I find this "ditch" as you call it and dig, I'll have all Google's passwords...must google cheapest shovel now ?

Lmao

[Arty]

i don't even have a smartphone how is this gonna work

like 2 step is will be optional........

[StackUnderflow]

2 factor authentication is still a password, it's just a ridiculously long password/phase.

[minibois]

i mean your phone also has a password on it 

but it says you can sign in withyour password then disable the phone.

You will be surprised how many people don't have a password on their phone's lockscreen..

[Arty]

You will be surprised how many people don't have a password on their phone's lockscreen..

it won't let you setup without one.

and ya know with face rec and fingerfrint sensors..........so easy.

[CalculuS]

NO NO NO NO NO NO NO NO NO

 

FIRST THIS STEAM MOBILE BULLSHIT AND NOW THIS?

 

[Arty]

NO NO NO NO NO NO NO NO NO

 

FIRST THIS STEAM MOBILE BULLSHIT AND NOW THIS?

 

 

agian, optional, and this is a good thing......

more secuity......

[Tech_Dreamer]

yes, it starts with an individuals personal phone..everything is safe (sprinkle some security terms here & there for backup)

[Patrick Bateman]

i don't even have a smartphone how is this gonna work

neither..

[Guest Kloaked]

like 2 step is will be optional........

But I don't have a smartphone???!1?

BTW hdds are superior to ssd. #hipstermasterrace

[BuckGup]

This sounds horrible. Seems alot easier to fake a phone number to receive info from it then crack a proper password

[Guest Kloaked]

This sounds horrible. Seems alot easier to fake a phone number to receive info from it then crack a proper password

Not really.

If someone competent wanted to get into your account, they'd do it no matter what type of available authentication you use for your email. This is for convenience and basic security that would protect most people.

[Arty]

But I don't have a smartphone???!1?

BTW hdds are superior to ssd. #hipstermasterrace

 

Optional 

This sounds horrible. Seems alot easier to fake a phone number to receive info from it then crack a proper password

it doesn't use phone numbers.

[PlayStation 2]

Hey, you got your Valve into my Google!

[Guest Kloaked]

Optional

I was making fun of Terry

[elfensky]

I think I generally like the idea: when I login for the first time on a PC, I need my phone anyway because I have 2-step enabled, so my original thought of it being cumbersome is not really valid, and afterwards it doesn't ask for anything as I use the checkbox to remember the PC & Password.

[Daelar]

I dunno about this. Their two factor authentication seems like a much safer bet.

[Arty]

They really wanna invite hackers and crackers into cracking this down and hacking into tons of accounts ?

I think Google knows what its doing.