Tuesday, March 4, 2025
Homecyber securityPasskeys Available for Passkeys high-risk Users in the Advanced Protection Program

Passkeys Available for Passkeys high-risk Users in the Advanced Protection Program

Published on

SIEM as a Service

Follow Us on Google News

Google has announced the integration of passkeys into its Advanced Protection Program (APP).

This development aims to provide an easier and more secure alternative to traditional passwords, enhancing protection against common cyber threats such as phishing, malware, and unauthorized data access.

What is a Passkey?

Passkeys represent a revolutionary step forward in digital security. Unlike traditional passwords, passkeys are based on FIDO Authentication, which makes them resistant to phishing attacks.

They offer a seamless sign-in experience, relying on biometric data such as fingerprints, face scans, or a PIN.

According to Google, passkeys are 50% faster at sign-in than traditional passwords.

Join our free webinar to learn about combating slow DDoS attacks, a major threat today.

Key Benefits of Passkeys:

  • Choice: Users can create passkeys on personal devices like smartphones and laptops, as well as modern physical security keys. They can be used without a password by default, but can also be set up for use after a password if preferred.
  • Convenience: Passkeys eliminate the need to remember or type in passwords, streamlining the sign-in process.
  • Security: Passkeys are more secure than traditional passwords and legacy forms of multi-factor authentication because they are tied to the user’s device and not stored on servers, making them less susceptible to phishing attacks.

How Passkeys Enhance APP

Previously, enrolling in the APP required users to have two physical security keys, one of which they used along with their password to log in.

This posed challenges for individuals who might not always have access to physical security keys, such as journalists in conflict zones or political campaign staffers on the move.

Passkeys address this issue by allowing high-risk users to leverage the security and convenience of their devices for authentication.

Enrollment Process for APP Using a Passkey:

  1. Ensure you have a compatible device and browser.
  2. Visit the Advanced Protection Program enrollment page.
  3. Click on “Get started” and follow the on-screen instructions.
  4. Choose to enroll with a passkey or a physical security key.
  5. Add recovery options during enrollment, such as a phone number, email, or another passkey or security key, to help regain access if locked out.

New Partnerships to Protect High-Risk Individuals

With the introduction of passkeys, Google has launched a new partnership with Internews to provide safety and security support to journalists and human rights workers through Internews’ global network of security partners and trainers.

This initiative will span 10 countries across Asia, Latin America, and Europe.

Google’s ongoing efforts to enhance online safety tools and resources, such as APP and Project Shield, have already resulted in the distribution of over 200,000 free security keys worldwide and security training in 20 countries.

The introduction of passkeys is a testament to Google’s commitment to protecting high-risk users in an increasingly digital world.

"Is Your System Under Attack? Try Cynet XDR: Automated Detection & Response for Endpoints, Networks, & Users!"- Free Demo

Divya
Divya
Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Latest articles

Pathfinder AI – Hunters Announces New AI Capabilities for Smarter SOC Automation

Pathfinder AI expands Hunters' vision for AI-driven SOCs, introducing Agentic AI for autonomous investigation...

Google Secretly Tracks Android Devices Even Without User-Opened Apps

A recent technical study conducted by researchers at Trinity College Dublin has revealed that...

LLMjacking – Hackers Abuse GenAI With AWS NHIs to Hijack Cloud LLMs

In a concerning development, cybercriminals are increasingly targeting cloud-based generative AI (GenAI) services in...

Microsoft Strengthens Trust Boundary for VBS Enclaves

Microsoft has introduced a series of technical recommendations to bolster the security of Virtualization-Based...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Pathfinder AI – Hunters Announces New AI Capabilities for Smarter SOC Automation

Pathfinder AI expands Hunters' vision for AI-driven SOCs, introducing Agentic AI for autonomous investigation...

Google Secretly Tracks Android Devices Even Without User-Opened Apps

A recent technical study conducted by researchers at Trinity College Dublin has revealed that...

LLMjacking – Hackers Abuse GenAI With AWS NHIs to Hijack Cloud LLMs

In a concerning development, cybercriminals are increasingly targeting cloud-based generative AI (GenAI) services in...