3 ms·
I think you’ll still need a password on your account for cases where no passkey is available, and possibly for other scenarios of heightened fraud risk. That’s
by jkaplowitz 3y ago
I think you’ll still need a password on your account for cases where no passkey is available, and possibly for other scenarios of heightened fraud risk. That’s why the setting they’re describing in the blog post is named “Skip password when possible”.
Disclaimer: although I worked for Google many years ago in a role entirely unrelated to Google account authentication, I have no inside info on this announcement, could be wrong about what I say in the first sentence of this comment, and am not speaking for Google here.
- goosedragons 3y agoI think there's going to be an issue with people forgetting passwords they lasted used 5 years ago. Recovery needs to be much better thought out.
- jkaplowitz 3y agoI agree that recovery is an important question. Maybe they will make sure to prompt for a password at least every N months? I have no idea what their answer for this may be, but they probably have one.
- vdelitz 3y agoI also think that for sign-ups you still need a password for a while (simply as a fallback)
- skarra 3y agoYou're spot on. And I work on the Google authentication team right now :)