Your Phone May Soon Replace Many of Your Passwords
Summary: Apple, Google and Microsoft announced they will soon support a passwordless sign-in standard from the FIDO Alliance and W3C, where users unlock a phone with a PIN or biometric to sign in to websites and services. Under the approach, the phone stores a FIDO credential called a passkey based on public key cryptography, and the companies said the capabilities will be enabled across their platforms over the course of the coming year.
What you should know: A March report from SpyCloud cited in the piece found 64 percent of users reuse passwords across multiple accounts and 70 percent of credentials compromised in previous breaches are still in use, so the exposure that passkeys aim to remove is already sitting in most organizations' credential stores.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026