Password-free web security is coming to Chrome, Firefox, Edge
The nightmare of remembering passwords is, hopefully, finally coming to an end with support for two-factor options in browsers.
Scott SteinEditor at Large
I started with CNET reviewing laptops in 2009. Now I explore wearable tech, VR/AR, tablets, gaming and future/emerging trends in our changing world. Other obsessions include magic, immersive theater, puzzles, board games, cooking, improv and the New York Jets. My background includes an MFA in theater which I apply to thinking about immersive experiences of the future.
ExpertiseVR and AR, gaming, metaverse technologies, wearable tech, tabletsCredentials
Nearly 20 years writing about tech, and over a decade reviewing wearable tech, VR, and AR products and apps
Passwords are problematic, and most people don't manage them properly. An alternative is coming to several major web browsers soon: Google,
and Microsoft are supporting built-in support for a password-free method of authentication on
, Firefox and Edge browsers in the coming months.
The supported WC3 web authentication API (known as WebAuthn) will be on by default in Chrome and Firefox starting with updates due in May. It will allow security to be managed without usernames and passwords, storing identification data via unique crytopgraphic keys on secondary devices. It will also allow PINs, fingerprints, face scans and other biometric data to give access to sites over a connected device.
Besides reducing the risks of phishing, this will mean greater support for USB, NFC or Bluetooth secondary devices to act as security keys when logging in. Whether that's a phone, a USB authenticator key, or even a smartwatch or a ring, it could help usher in a next wave of wearable security devices in the future.