Google has rolled out passkeys to users of its Advanced Protection Program (APP), enhancing account security for individuals at risk of targeted digital attacks. Passkeys, a cryptographic authentication replacement for passwords, offer a higher security level by being stored locally and protected by biometric or PIN verification. Google's initiative addresses the explosive growth of digital crime, simplifying and strengthening user protection against phishing and fraud, especially for users in the public eye or engaging in controversial work. While previously dependent on hardware tokens for two-factor authentication, APP now provides the convenience of passkeys without compromising on security, thus sustaining user trust by mitigating potential risks associated with compromised account credentials.
Source: https://www.wired.com/story/google-passkey-advance-protection-program/
TPRM report: https://scoringcyber.rankiteo.com/company/google
"id": "goo955071024",
"linkid": "google",
"type": "Breach",
"date": "7/2024",
"severity": "25",
"impact": "1",
"explanation": "Attack without any consequences"{'affected_entities': [{'industry': 'Technology',
'location': 'Global',
'name': 'Google',
'size': 'Large',
'type': 'Company'}],
'description': 'Google has rolled out passkeys to users of its Advanced '
'Protection Program (APP), enhancing account security for '
'individuals at risk of targeted digital attacks. Passkeys, a '
'cryptographic authentication replacement for passwords, offer '
'a higher security level by being stored locally and protected '
"by biometric or PIN verification. Google's initiative "
'addresses the explosive growth of digital crime, simplifying '
'and strengthening user protection against phishing and fraud, '
'especially for users in the public eye or engaging in '
'controversial work. While previously dependent on hardware '
'tokens for two-factor authentication, APP now provides the '
'convenience of passkeys without compromising on security, '
'thus sustaining user trust by mitigating potential risks '
'associated with compromised account credentials.',
'impact': {'brand_reputation_impact': 'Positive'},
'lessons_learned': 'Implementing passkeys enhances security and user trust by '
'mitigating risks associated with compromised account '
'credentials.',
'motivation': 'Enhance account security',
'post_incident_analysis': {'corrective_actions': 'Rollout of passkeys for '
'enhanced security',
'root_causes': 'Previous dependence on hardware '
'tokens for two-factor '
'authentication'},
'recommendations': 'Adopt passkeys for authentication to improve security and '
'user experience.',
'references': [{'source': 'Google'}],
'response': {'communication_strategy': 'Public announcement of passkey '
'rollout'},
'title': 'Google Rolls Out Passkeys for Advanced Protection Program Users',
'type': 'Security Enhancement'}