Google has issued new guidance urging users to transition away from traditional password-based authentication methods amid rising cybersecurity challenges. The company reports that 61 percent of email users have been targeted by attacks, highlighting vulnerabilities in conventional password systems. The push comes as part of a broader industry movement toward passwordless authentication, led by major tech companies through the FIDO Alliance’s standards.
Recent data indicates a significant escalation in password-breaking attempts, with Microsoft reporting approximately 7,000 attacks per second – nearly double previous rates. The surge coincides with a major data breach that exposed 184 million plain-text passwords connected to various services including Google, Apple, Microsoft, and Instagram. The dramatic increase in attacks has prompted Microsoft to accelerate its own transition to passkeys for over one billion users.
As an alternative to passwords and traditional two-factor authentication (2FA), Google is advocating for the adoption of passkeys – a biometric authentication system that uses fingerprint recognition, facial scans, or phone screen locks. The company describes passkeys as “phishing resistant,” offering a more secure login method that leverages users’ existing device security features. The technology builds upon Google’s ongoing efforts to enhance biometric authentication security across its platforms.
Google has emphasized that it never initiates contact with users via phone or email regarding account issues or password changes. The company recommends using authentication apps for two-factor authentication rather than SMS text messages or email, which can be compromised. The recommendation follows recent FBI and CISA warnings about vulnerabilities in SMS-based 2FA.
“Passwords are painful to maintain,” says Google, noting their susceptibility to phishing attacks and data breaches. “Passkeys is a login system that replaces passwords with biometric authentication via a trusted device like a smartphone… which can help users log in simply with the method they use to unlock their devices.” The approach follows similar implementations by other tech giants, including Apple’s integration of passkeys with device biometrics.
Research indicates a generational divide in security practices, with younger users showing greater willingness to adopt passkeys and social sign-ins, while older generations tend to maintain traditional authentication methods. The transition represents a significant shift in digital security, as major platforms work to establish passwordless authentication as the new standard by 2025.
Sources: NDTV, MyBroadband, Guard.io, Moneywise, The Star
