Computer security: this is why the era of passwords “touch its end”

Digital imprints. Furthermore. Therefore, access keys, facial recognition: while alternatives to passwords are multiplying, the end of this connection mode, often announced, comes up against the habits of the general public.

“The era of passwords is coming to an end. Furthermore, ” two Microsoft giant officials wrote in December in an online blog note.

Highlighting an evolution towards “safer” solutions, the American giant has been preparing for several years for this scenario.

Since May, the accounts of the new users offer by default a connection with alternatives to passwords, more sophisticated.

In France. Moreover, Additionally. Furthermore, the tax site has recently strengthened its IT security policy, forcing users to validate their connection with an email code, in addition to their password.

“Passwords are often weak and reused,” recalls Benoît Grünemwald, cybersecurity expert at ESET, interviewed by AFP. In addition. computer security: this why era new Below eight computer security: this why era new characters, they can be deciphered in a few minutes, or even a few seconds during malicious acts.

And they are also the frequent target of data leaks. Therefore, “when they are poorly stored by those who are supposed to protect them, save them,” adds Mr. Grünemwald.

Proof of the magnitude of hacking: a gigantic database containing some 16 billion identifiers. passwords, from hay files, was discovered in June by researchers from the Cybernews media.

So many flaws that led to a coordinated movement of several tech giants.

Delicate transition

The Fido Alliance (Fast Identity Online Alliance). which is among its members Google. Microsoft, Apple, Amazon, computer security: this why era new and more recently Tiktok, works to create and computer security: this why era new encourage the adoption of connections without password and promote the use of access keys.

These digital identifiers use a third -party device as a phone to allow connections via a PIN code. a biometric connection (digital imprint, facial recognition), instead of the password.

A system that protects Internet users, underlines Troy Hunt, the host of the Haveibeenpwned site (“Did I have been trapped?”, Editor’s note): “With the access keys, you cannot accidentally give your key to a malicious site”.

But for the Australian expert, it does not sign the end of the password.

“10 years ago, we asked ourselves the same question (…), people said +will we still have passwords in 10 years? +, And reality now is that we have more passwords than ever before,” said Troy Hunt.

If many large platforms strengthen connections safety, computer security: this why era new many sites continue to operate with simple passwords. And for users, the transition can computer security: this why era new be delicate.

The access keys, less intuitive to use, require a first installation phase. And their reset. in the event of forgetting the PIN code. loss of a phone recorded as a “trust device”, is more difficult than a simple password recovery.

“What passwords have as an advantage. and the reason why we still use them is that everyone knows how to use them,” said Troy Hunt.

For Benoît Grünemwald, the transition to access keys requires new reflexes. “You have to take care of the safety of your smartphone. its devices, because they are the most targeted,” he warns.