PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

Google Wants to Kill Your Password

 & Chloe Albanesius Executive Editor, News

Our team tests, rates, and reviews more than 1,500 products each year to help you make better buying decisions and get more from technology.

Our Expert
LOOK INSIDE PC LABS HOW WE TEST
65 EXPERTS
43 YEARS
41,500+ REVIEWS

As our lives increasingly move to the cloud, the need for stronger passwords is more important than ever. But aside from avoiding easy-to-guess birthday/pet name passwords, what else can be done?

Google is now investigating alternatives to the password - like a USB-based card from Yubico that would sign you into your Google account when inserted into a device.

In a paper that will be published in IEEE Security & Privacy Magazine this month, Google vice president of security Eric Grosse and engineer Mayank Upadhyay explore the various ways that people might use passwords in the years to come.

Grosse and Upadhyay gave Wired a sneak peek at their paper, which includes the option to use a cryptographic card from Yubico to log into Google services like Gmail, Drive, or Chrome. As Wired noted, the Googlers had to make some changes to Chrome in order to get the cards to authenticate, but once that was in place, it did not require any additional installation - registration can be completed in one click.

"We're focused on making authentication more secure, and yet easier to manage," a Google spokesman said in a statement today. "We believe experiments like these can help make login systems better."

Those who work in industries that handle secure information - like banking - have long used authentication tokens to log into their work accounts. But consumer services like Google have stuck to the password approach for ease of use.

The paper also discussed options like a "smart ring" or a smartphone that could authorize a new PC with one tap. Ultimately, these devices could mean the end of passwords you'd have to remember. They acknowledged, however, that it can't live inside a Google bubble.

"Others have tried similar approaches but achieved little success in the consumer world," they said, according to Wired. "Although we recognize that our initiative will likewise remain speculative until we've proven large scale acceptance, we're eager to test it with other websites."

What happens if you lose your Google password gizmo? Yubico tweeted today that "many apps can bypass the YubiKey login if it is lost or issue a temporary token code." Multiple tokens can also be used - "it depends on the application and security selected," Yubico said.

The company maintained that the YubiKey is hard to lose since it fits on a keychain "like a key to your door."

For more, see PCMag's roundup of the Best Password Managers.

About Our Expert

Chloe Albanesius

Chloe Albanesius

Executive Editor, News

My Experience

I started out covering tech policy in DC for The National Journal, where my beat included state-level tech news and all the congressional hearings and FCC meetings I could handle. I later covered Wall Street trading tech before switching gears to consumer tech. I now lead PCMag's news coverage.

My Areas of Expertise

Getting my start in DC means I still have a soft spot for tech policy; Congressional hearings can sometimes be as entertaining as a Bravo reality show, for better or worse. But PCMag is all about the technology we use every day, as well as keeping an eye out for the trends that will shape the industry in the years ahead (or flop on arrival). I've covered the rise of social media, the iOS vs. Android wars, the cord-cutting revolution that's now left us with hefty streaming bills, and the effort to stuff artificial intelligence into every product you could imagine. This job has taken me to CES in Vegas (one too many times), IFA in Berlin, and MWC in Barcelona. I also drove a Tesla 1,000 miles out west as part of our Best Mobile Networks project. Of late, my focus is on our hard-working team of reporters at PCMag, guiding and editing their robust coverage.

Read full bio