October 14, 2019 News Magazine

Google turns your Android phone into a security key

Your Android phone could soon replace your hardware security key to provide two-factor authentication access to your accounts. As the company announced at its Cloud Next conference today, it has developed a Bluetooth-based protocol that will be able to talk to its Chrome browser and provide a standards-based second factor for access to its services, similar to modern security keys.

It’s no secret that two-factor authentication remains one of the best ways to secure your online accounts. Typically, that second factor comes to you in the form of a push notification, text message or through an authentication app like the Google Authenticator. There’s always the risk of somebody intercepting those numbers or phishing your account and then quickly using your second factor to log in, though. Because a physical security key also ensures that you are on the right site before it exchanges the key, it’s almost impossible to phish this second factor. The key simply isn’t going to produce a token on the wrong site.

Because Google is using the same standard here, just with different hardware, that phishing protection remains intact when you use your phone, too.

Bluetooth security keys aren’t a new thing, of course, and Google’s own Titan keys include a Bluetooth version (though they remain somewhat controversial). The user experience for those keys is a bit messy, though, since you have to connect the key and the device first. Google, however, says that it has done away with all of this thanks to a new protocol that uses Bluetooth but doesn’t necessitate the usual Bluetooth connection setup process. Sadly, though, the company didn’t quite go into details as to how this would work.

Google says this new feature will work with all Android 7+ devices that have Bluetooth and location services enabled. Pixel 3 phones, which include Google’s Titan M tamper-resistant security chip, get some extra protections, but the company is mostly positioning this as a bonus and not a necessity.

As far as the setup goes, the whole process isn’t all that different from setting up a security key (and you’ll still want to have a second or third key handy in case you ever lose or destroy your phone). You’ll be able to use this new feature for both work and private Google accounts.

For now, this also only works in combination with Chrome. The hope here, though, is to establish a new standard that will then be integrated into other browsers, as well. It’s only been a week or two since Google enabled support for logging into its own service with security keys on Edge and Firefox. That was a step forward. Now that Google offers a new service that’s even more convenient, though, it’ll likely be a bit before these competing browsers will offer support, too, once again giving Google a bit of an edge.


Source: TechCrunch

Tags: in Uncategorized
Banner
Related Posts

SpaceX’s Crew Dragon makes its first orbital launch tonight

March 1, 2019

March 1, 2019

After years of development and delays, SpaceX’s Crew Dragon is ready to launch into orbit. It’s the first commercially built...

Beating back bears, Bitcoin briefly balloons beyond $4,900

April 2, 2019

April 2, 2019

Bitcoin went on a tear in early morning trading earlier today, popping up to above $4,900 and reminding some investors...

GM is opening up Super Cruise hands-free driving system to more roads

June 5, 2019

June 5, 2019

GM’s hands-free driver assistance system Super Cruise, has been lauded for its capabilities. But it’s also been criticized because of...

BMW’s next-gen cruise control stops at red lights

June 25, 2019

June 25, 2019

At its NextGen event, BMW today premiered the next generation of its adaptive cruise control system, which will be able...

Kurly, a grocery e-commerce startup in Korea, closes upsized $113M Series B round

May 30, 2019

May 30, 2019

Kurly, a startup that operates a grocery delivery service in Korea, said today that it has closed an upsized Series...

Google Cloud takes aim at verticals starting with new set of tools for retailers

April 10, 2019

April 10, 2019

Google might not be Adobe or Salesforce, but it has a particular set of skills, which fit nicely with retailer...

This drone swarm spray painted a jumbo-size graffiti mural

July 5, 2019

July 5, 2019

It’s Friday, so why not watch some good old-fashioned drone-powered graffiti? A design firm in Italy has put together a...

Energizer’s P18K Pop is basically a giant battery with a smartphone built into it

February 26, 2019

February 26, 2019

This is the future you asked for. When people read smartphone reviews, one of the first things they want to...

The damage of defaults

March 23, 2019

March 23, 2019

Apple popped out a new pair of AirPods this week. The design looks exactly like the old pair of AirPods....

Google’s own data proves two-factor is the best defense against most account hacks

May 20, 2019

May 20, 2019

Every once in a while someone will ask me what is the best security advice. The long answer is “it...

It was a really bad month for the internet

July 5, 2019

July 5, 2019

If these past few weeks felt like the sky was falling, you weren’t alone. In the past month there were...

Alphabet’s Sidewalk Labs is developing visual cues to indicate when their tech is monitoring you

April 19, 2019

April 19, 2019

Alphabet’s subsidiary focused on urban tech development, Sidewalk Labs, is now trying to reinvent signage for smart cities. These signs...

Transportation Weekly: Didi woes, how Nuro met Softbank, Amazon’s appetite

February 16, 2019

February 16, 2019

Welcome back to Transportation Weekly; I’m your host Kirsten Korosec, senior transportation reporter at TechCrunch. This is the second edition...

Lego is piloting audio and braille building instructions

August 28, 2019

August 28, 2019

Here’s a nice thing from some companies this morning — and it’s got a compelling back story, to boot. Lego...

GuestReady raises $6M to help hosts on Airbnb and other services manage their property

June 18, 2019

June 18, 2019

GuestReady, a three-year-old service that lets shared-economy hosts manage their business on Airbnb and other rental sites, has announced a...

Comments
Leave a Reply

Your email address will not be published. Required fields are marked *