fbpx
253.777.0763    Get SUPPORT

Graemouse Technologies Blog

Tip of the Week: Your Phone Can Work as Your Security Key

Tip of the Week: Your Phone Can Work as Your Security Key

If you’re like most people nowadays, your mobile phone is currently well within your reach (and that’s assuming you aren’t reading this blog on it). The fact that most people keep their phone on them at all times has greatly contributed to these devices becoming a part of any given work-related process. One major way is the implementation of two-factor authentication, which we’ll discuss as a part of this week’s tip.

As we begin, it is important that we acknowledge that the Android operating system has been granted FIDO2 certification. In other words, the FIDO (Fast IDentity Online) Alliance has given the Android OS their seal of approval in regard to the authentication standards that the Alliance has set.

What Does This Mean?

In very simple terms, any Android device running 7.0 or higher with the latest Google Chrome update installed can be used as part of a two-factor authentication strategy - more specifically, as a security key. This includes the support that FIDO2 offers for onboard fingerprint scanners as a means of identity authentication. Currently, this authentication standard is only supported by Android, with no indication of Apple devices incorporating it.

In no uncertain terms, this all means that passwords may soon be phased out.

Abandoning Passwords

Passwords have been the standardized form of authenticating one’s identity for quite some time, despite the potential issues that are present with them. How often have we seen just how many ways a determined cybercriminal has to obtain a password? Between insecure databases filled with credentials and unfortunately successful phishing schemes, millions of accounts have been exposed - and that isn’t even taking all the times an insecure password was guessed into account.

The biggest weakness that any password has is the fact that it can be shared at all, that someone other than the owner can use it. Over any other reason, this is why FIDO2 is likely to become as popular as it is expected to be. When was the last time you successfully shared a thumbprint with someone, after all? Furthermore, FIDO2 keeps all of the information that is pulled from its biometrics onboard the device, keeping it safe from being stolen on the Internet.

As an added bonus, FIDO2 won’t allow the user to input their fingerprint’s biometric data into websites that don’t have sufficient security measures in place.

How to Use Your Android Device as a FIDO2 Security Key

In order to leverage your Android device as a security key, you need to make sure that it meets a few benchmarks. First and foremost, you’ll need to be running at least Android 7.0, with the latest version of Chrome installed. You will also need to have Bluetooth activated, and a Google account with two-step verification enabled.

This is somewhat simple to do. Logging into your Google account, access the Security section. Here, you’ll find the option to activate 2-Step Verification. After a short process, your smartphone will work as a security key.

Authenticating Google Sign-Ins with Your Phone

As long as you have enabled both Bluetooth and Location on your mobile device, any Google service you try to access will prompt you to confirm the sign-in attempt via your phone. This process is exceptionally simple - all you have to do is press Yes on your phone and wait. Once you’ve done so, you can confidently access your Google account, securely. As more developers adopt FIDO2, this enhanced security will only appear more often.

What do you think of this new authentication method? Share your impressions in the comments! While you’re there, let us know if there are any other tips you’d like us to cover!

Virtual Reality has a Limitless Future
How to Mitigate Unhappy Online Opinions
 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Sunday, August 25 2019

Captcha Image

Mobile? Grab this Article!

QR-Code dieser Seite

Tag Cloud

Backup Machine Learning Smartphone Addiction BYOD Training Chrome IT Plan Cabling Best Practices Identity Theft Automation Vulnerability Small Business Mobile Device Windows 10 Network Law Enforcement Quick Tips Artificial Intelligence Spam Collaboration Scam Help Desk User Tips Remote Monitoring Comparison Hosted Computing Google Docs Paperless Office Electronic Medical Records Value Meetings Business Computing Tech Term Update Browser Hardware Server IT Management Public Cloud Business Management Bring Your Own Device Cryptomining Access Control Social Human Resources Miscellaneous Staff Outlook IT Services Apps VoIP Managed IT Data Breach Communication Content Management Online Shopping Saving Money Business Intelligence Fraud eWaste How To VPN ROI Cloud Computing Sports Business Continuity Two-factor Authentication Privacy Cybersecurity OneNote Applications HIPAA Productivity Smart Tech Social Media Money Computers Data Backup CES Data Internet Exlporer Remote Worker Tip of the Week Hosted Solutions Technology Business Internet of Things Government Software Processor Files Cloud Windows 10 Education Software Tips Outsourced IT Redundancy Efficiency Google IT Support Unsupported Software Net Neutrality Phishing Document Management Password Keyboard Cybercrime Data Storage Alert Relocation FCC Managed Service Android Facebook Specifications Microsoft Office Vendor Management NIST Workplace Tips Wi-Fi Computer Fan Display Telephone Systems Skype Word Information Internet Screen Mirroring Holiday Operating System Users Managed IT Services Software as a Service Website Computer Cast Hackers Entertainment Office App Private Cloud Email Avoiding Downtime Search Engine Windows IBM Disaster Recovery Managing Stress Social Engineering 5G Mobile Device Management Microsoft Voice over Internet Protocol Digital Signage Blockchain Ransomware Botnet Data Security Hiring/Firing Google Drive Servers Network Security Gadgets Innovation Security Employer-Employee Relationship Passwords Downtime Augmented Reality Mobile Devices BDR Employee Travel Encryption Telephone System Telephony Virtual Assistant WiFi Networking Malware Office 365 Data Protection Cryptocurrency Data Recovery Settings Communications Windows 7 Smartphones Virtualization Router Bandwidth Managed IT Services Save Money Upgrade Spam Blocking Connectivity Health Infrastructure

Newsletter Sign Up