Dab tsi yog passwordless accounts thiab lawv hloov pauv kev ruaj ntseg digital li cas?

Koj puas tuaj yeem xav txog kev nkag mus rau koj cov nyiaj hauv online yam tsis tas yuav nco ntsoov ib lo lus zais? Peb tab tom los ze zog rau qhov xwm txheej ntawd. Kev txhim kho thev naus laus zis thiab kev hloov pauv ntawm cybersecurity yog tsav cov kev daws teeb meem uas tso cai rau peb txheeb xyuas qhov tseeb yam tsis muaj kev cia siab rau cov passwords, xaiv txoj hauv kev yooj yim dua thiab ruaj ntseg dua. Yog tias koj tsis paub meej txog cov ntsiab lus xws li "passwordless authentication," "access keys," lossis "biometric verification," tsis txhob txhawj: ntawm no yog cov lus teb. Cov lus qhia ua tiav thiab yooj yim tshaj plaws kom nkag siab txog dab tsi passwordless account yog thiab lawv yuav hloov txoj kev uas peb nkag mus rau peb cov kev pabcuam digital li cas.

Cov passwords ib txwm tau poob hauv av nyob rau hauv lub ntsej muag ntawm qhov tshwm sim tsis tuaj yeem tshwm sim ntawm lwm txoj hauv kev. Lub neej yav tom ntej ntawm kev ruaj ntseg online yog cim los ntawm yuav tsum ua kom yooj yim rau cov neeg siv kev paub y, tib lub sijhawm, nce qib ntawm kev tiv thaiv cyberattacks. Hauv tsab xov xwm no, koj yuav kawm paub tias passwordless account yog dab tsi, lawv ua haujlwm li cas, qhov zoo li cas lawv muab, cov kev pheej hmoo ntawm cov passwords tam sim no, cov kev siv feem ntau, cov qauv ntawm cov tuam txhab thev naus laus zis loj, thiab cov lus qhia pib siv lawv hauv koj lub neej txhua hnub.

Dab tsi yog passwordless accounts?

Cov nyiaj tsis muaj tus password yog Cov profiles uas koj tuaj yeem lees paub thiab nkag mus yam tsis tas yuav nkag mus rau tus password ib txwm muaj.. Hloov chaw, lawv siv lwm txoj hauv kev, xws li cov ntiv tes, kev paub lub ntsej muag, cov lej ib ntus, cov yuam sij nkag mus rau lub cev, cov khoom siv txawb, lossis cov ntawv pom zoo xa mus rau ib qho app. Txoj hauv kev no tsom mus rau kev tshaj lij, kev nyab xeeb, thiab kev txheeb xyuas tus neeg siv tus phooj ywg zoo dua.

Qhov kev hloov pauv hauv kev lees paub yog qhov tshwm sim ntawm xyoo ntawm kev tshawb fawb thiab teb rau qhov teeb meem loj zuj zus: Kev nyiag tus password thiab cyberattacks cuam tshuam nrog cov ntaub ntawv pov thawj raug nyiag. Raws li kev tshawb fawb tsis ntev los no, ntau dua 80% ntawm cov ntaub ntawv ua txhaum cai cuam tshuam nrog tus password. Cybercriminals siv txhua yam txuj ci (phishing, brute force, social engineering) kom nkag tau rau lawv, thiab ib zaug ua tiav, lawv tuaj yeem nkag mus rau ntau cov kev pabcuam los ntawm kev rov siv tib lo lus zais.

Passwordless authentication, tseem hu ua "passwordless authentication«, muab qhov system no twist: Cov neeg siv tsis tas nyob ntawm kev sib xyaw ntawm cov ntawv thiab cov lej uas lawv yuav tsum nco ntsoov thiab tiv thaiv.. Tam sim no, tus yuam sij hloov los ntawm qee yam koj muaj (koj lub xov tooj ntawm tes, tus yuam sij kev nyab xeeb) lossis qee yam koj yog (koj cov yam ntxwv biometric).

Vim li cas cov passwords tsis muaj kev nyab xeeb ntxiv lawm?

Tau ntau xyoo lawm, passwords yog qhov cuam tshuam loj tshaj plaws rau kev tiv thaiv kev nkag mus rau cov nyiaj digital thiab cov ntaub ntawv. Txawm li cas los xij, Nws txoj kev ua tau zoo raws li kev lees paub tseeb tau raug nug ntau dua.. Vim li cas? Feem ntau yog vim li cas:

• Susceptibility rau brute quab yuam tawm tsam: Hackers muaj cov kev pabcuam automated uas sim ntau lab ntawm kev sib txuas kom txog thaum lawv pom qhov yog.
• Tsis muaj zog lossis rov ua tus password: Ntau tus neeg xaiv cov passwords uas yooj yim-rau-siv (xws li "123456" lossis lawv lub hnub yug) thiab rov siv lawv hla ntau tus lej. Yog tias ib qho raug cuam tshuam, tus so kuj muaj kev pheej hmoo.
• Phishing thiab pov thawj tub sab: Cybercriminals xa email cuav lossis tsim cov vev xaib uas dag cov neeg siv kom qhia lawv tus password.
• Nyuaj nco lossis tswj cov passwords nyuaj: Cov nyiaj ntau dhau yuam kom ntau tus siv tib lo lus zais ntawm cov kev pabcuam sib txawv lossis khaws cia rau hauv qhov chaw tsis muaj kev nyab xeeb.

Cov kev pheej hmoo no tau ua rau kev tshawb nrhiav txoj hauv kev uas tsis muaj tus password zoo li qub thiab muaj kev tiv thaiv ntau dua thiab yooj yim dua.. Yog vim li cas cov tuam txhab thev naus laus zis thiab kev ruaj ntseg cybersecurity tau mob siab rau kev lees paub tus password tsis muaj tseeb.

Yuav ua li cas passwordless authentication ua haujlwm?

Lub hom phiaj ntawm kev lees paub tus password tsis muaj tseeb yog txhawm rau txheeb xyuas koj tus kheej yam tsis tas yuav nkag mus rau tus yuam sij zais cia txhua zaus koj nkag mus.. Txhawm rau ua qhov no, siv lwm yam, muaj kev nyab xeeb dua kev lees paub. Cov no tuaj yeem muab faib ua:

• Qee yam koj muaj: Piv txwv li, koj lub xov tooj ntawm tes, daim npav ntse, lossis tus yuam sij kev nyab xeeb ntawm lub cev (xws li Yubikey lossis FIDO2-tshaj ntaus ntawv).
• Ib yam koj yog: Koj cov yam ntxwv biometric, xws li koj tus ntiv tes, ntsej muag, iris, lossis txawm tias koj lub suab.

Hauv kev xyaum, cov txheej txheem feem ntau zoo li no:

1. Koj sau npe rau qhov kev pabcuam thiab teeb tsa ib lossis ntau txoj hauv kev nkag mus.
2. Thaum koj sim nkag mus rau hauv, lub kaw lus nug koj kom siv ib qho ntawm cov txheej txheem (piv txwv li, lub ntsej muag qhib ntawm koj lub xov tooj).
3. Lub kaw lus sib piv cov ntaub ntawv lossis cov teeb liab biometric nrog cov ntaub ntawv kaw tseg thiab, yog tias nws phim, tso cai rau koj nkag mus.

Ib qho kev xaiv dav tshaj plaws tam sim no yog cov siv cov yuam sij los yog "passkeys". Lawv ua raws li ib khub ntawm cov yuam sij cryptographic: ib qho pej xeem ( khaws cia rau ntawm lub server) thiab ib qho ntiag tug ( khaws cia rau hauv koj lub cuab yeej nkaus xwb thiab tsis muaj leej twg tuaj yeem nkag tau). Thaum lub sij hawm nkag mus, tus neeg rau zaub mov xa cov kev sib tw lej uas tsuas yog koj tus yuam sij ntiag tug tuaj yeem daws tau. Yog li, txawm tias tus neeg tawm tsam tau txais tus yuam sij rau pej xeem, lawv yuav tsis tuaj yeem nkag mus rau koj tus as khauj yam tsis muaj cov cuab yeej siv lub cev lossis biometric.

Qhov zoo ntawm passwordless accounts

Passwordless authentication muab cov txiaj ntsig rau cov neeg siv thiab cov lag luam thiab kev tswj hwm.:

• Kev ruaj ntseg ntau dua: Tshem tawm cov kev tawm tsam uas siv cov passwords, xws li phishing lossis brute force. Cov ntaub ntawv biometric yog qhov tshwj xeeb thiab nyuaj dua los rov ua dua lossis nyiag.
• Txhim kho cov neeg siv kev paub: Koj tsis tas yuav nco lossis hloov cov passwords nyuaj. Koj tuaj yeem nkag mus sai sai nrog koj tus ntiv tes, ntsej muag, lossis lub xov tooj ntawm tes.
• Internal kev pheej hmoo txo: Rau cov lag luam, muaj kev pheej hmoo tsawg dua ntawm cov ntaub ntawv ua txhaum cai lossis xau vim kev tswj hwm tus neeg ua haujlwm tsis zoo.
• Txoj cai ua raws li: Ntau cov kev cai lij choj twb xav kom muaj kev lees paub ntau ntxiv thiab ntau qhov kev lees paub hauv cov haujlwm tseem ceeb (banking, kho mob, pej xeem sector).
• Tsawg kev ntxhov siab thiab kev txhawb nqa: Tus lej ntawm qhov xwm txheej cuam tshuam txog kev nkag mus rau cov teeb meem lossis rov qab cov yuam sij ploj raug txo.
• Scalability thiab cross-platform compatibility: Passwordless txoj kev tuaj yeem hloov mus rau cov khoom siv sib txawv thiab cov tshuab, ua kom yooj yim nkag mus los ntawm txhua qhov chaw.

Qhov kev sib xyaw ua ke ntawm kev yooj yim thiab kev nyab xeeb no yog tsav tsheb ntau thiab ntau lub koom haum los siv cov kev daws teeb meem tsis muaj password rau ntawm qhov loj., ob qho tib si rau nws cov neeg ua haujlwm thiab cov neeg siv khoom.

Main passwordless authentication txoj kev

Tsis muaj ib qho qauv rau kev tshem tawm cov passwords; Txhua lub koom haum lossis lub platform tuaj yeem xaiv ib lossis ntau lub tswv yim nyob ntawm seb hom neeg siv thiab cov ntsiab lus ntawm kev siv. Cov no yog cov nyiam tshaj plaws:

• Biometrics: Kev nkag tau los ntawm cov ntiv tes, kev paub lub ntsej muag, iris scanning, lossis kev txheeb xyuas lub suab. Niaj hnub nimno smartphones thiab laptops twb koom nrog sensors rau qhov no.
• Access keys (passkeys): Cov yuam sij Cryptographic ruaj ntseg khaws cia ntawm lub cuab yeej. Cov neeg siv tsuas paub meej tias qhov kev hloov pauv nrog lawv txoj kev biometric.
• Authentication Apps: Cov apps zoo li Microsoft Authenticator, Google Authenticator, lossis cov tshuab uas tsim cov ntawv ceeb toom thawb thov kev lees paub ncaj qha ntawm lub xov tooj ntawm tes.
• Physical security keys: USB li, smart cards, lossis tokens uas txhawb cov qauv xws li FIDO2/WebAuthn.
• Cov lej ib zaug (OTP): Txawm hais tias lawv tseem siv qhov sib koom "kev zais cia," lawv yog ib ntus thiab siv ib zaug xwb, txo kev pheej hmoo yog tias tus lej raug cuam tshuam.

Kev sib koom ua ke ntawm biometrics thiab nkag mus rau cov yuam sij, nrog rau cov txheej txheem xws li FIDO2 / WebAuthn, yog qhov tam sim no hauv ntau cov kev pabcuam.. Qhov no txhawb kev sib koom tes thiab kev ruaj ntseg ntawm cov khoom siv sib txawv thiab cov platforms.

Yuav ua li cas yog passwordless authentication txawv ntawm 2FA thiab OTP?

Nws yog ib qho tseem ceeb kom paub qhov txawv ntawm kev tsis lees paub tus lej password thiab ob qho kev lees paub qhov tseeb (2FA) lossis tus password ib zaug (OTP). Nws 2FA xav tau ob daim ntawv pov thawj kom paub meej tias tus kheej.: tej yam koj paub (password) thiab tej yam koj muaj (mobile, code, token). Cov OTP tsim cov lej ib ntus, feem ntau xa los ntawm SMS los yog tsim nyob rau hauv ib qho app, ntxiv ib qho kev thaiv ntxiv.

Passwordless authentication mus ib kauj ruam ntxiv: tshem tawm qhov yuav tsum tau nco qab lossis nkag mus rau ib qho kev qhia zais cia (tsis muaj tus password lossis ib ntus code). Kev nkag mus yog nyob ntawm yam xws li biometrics lossis muaj cov khoom siv. Yog li, qhov tsis muaj zog ntawm "ib yam dab tsi koj paub" ploj mus, ua rau cov neeg tawm tsam txoj haujlwm nyuaj dua.

Hauv cov kab ke 2FA ib txwm muaj, koj yuav nkag mus rau koj tus password thiab tom qab ntawd tus lej pov thawj; hloov, nrog cov Tsis muaj tus password, koj tsuas yog yuav tsum tso cai nkag nrog koj tus ntiv tes, ntsej muag, lossis lees txais cov ntawv ceeb toom hauv app., simplifying cov txheej txheem thiab ntxiv dag zog rau kev ruaj ntseg.

Kev siv lub neej tiag: Yuav ua li cas Microsoft thiab Google ua nws

Cov thev naus laus zis loj ua rau kev hloov pauv mus rau kev lees paub tus password tsis muaj tseeb.. Microsoft thiab Google twb tau muab cov kev xaiv siab heev rau kev tshem tawm cov passwords ntawm lawv cov kev pabcuam.

Microsoft tso cai rau koj tshem tawm koj tus lej password thiab lees paub siv txoj hauv kev xws li:

• Microsoft Qhabnias (app hauv mobile)
• Windows Hello (kev paub txog biometric ntawm Windows PCs)
• Lub cev ruaj ntseg yuam sij
• Cov lej xa los ntawm SMS

Google Tso cai rau kev siv cov yuam sij nkag hauv nws cov koom haum, tso cai rau cov neeg ua haujlwm nkag mus siv tsuas yog lawv lub xov tooj ntawm tes, tus yuam sij kev nyab xeeb, lossis kev paub txog biometric, synchronizing cov txheej txheem no hla cov khoom siv sib txawv thiab txwv tsis pub lawv nkag mus rau cov khoom siv pov thawj.

Ua ntej kaw cov passwords, nws tau pom zoo tias txhua yam khoom siv yuav tsum tau hloov kho thiab cov txheej txheem thaub qab tau teeb tsa kom raug. Platforms muaj cov cuab yeej los tswj cov xwm txheej, xws li kev poob lossis hloov pauv.

Yuav ua li cas yog tias koj poob koj lub cuab yeej lossis muaj teeb meem nkag mus?

Ib qho kev txhawj xeeb tseem ceeb yog yuav ua li cas yog tias koj poob koj lub xov tooj ntawm tes, tus yuam sij lub cev lossis yog tias lub ntsuas ntsuas biometric tsis ua tiav. Yog li ntawd, passwordless systems feem ntau tso cai rau lub koom haum ntawm ntau lwm txoj kev thiab backup li. Qee cov lus qhia:

• Teem ntau tshaj ib txoj kev lees paub (xws li lub xov tooj ntawm tes thiab tus yuam sij thaub qab).
• Siv cov apps lossis cov kev pabcuam uas tso cai rau koj tshem tawm kev nkag mus thaum poob lossis tub sab.
• Hloov koj txoj hauv kev yog tias koj xav tias koj lub cuab yeej raug cuam tshuam.

Kev tswj hwm hauv nruab nrab ntawm lub platform lub dashboards ua rau nws yooj yim los tshuaj xyuas thiab hloov kho cov txheej txheem teeb tsa, nrog rau kev txhawb nqa thaum muaj xwm txheej.

Cov haujlwm twg thiab cov tuam txhab lag luam twg xaiv rau tus lej tsis siv nyiaj?

Kev thawb kom tso tseg cov passwords los ntawm cov haujlwm uas tswj cov ntaub ntawv rhiab heev. Kev lag luam nyiaj txiag, kev noj qab haus huv, kev lag luam pej xeem, thiab kev kawm tau txais cov kev daws teeb meem tsis muaj password kom ua raws li cov cai thiab tiv thaiv cov ntaub ntawv. Kev loj hlob ntawm kev txav mus los ntawm kev ua haujlwm thiab kev ua haujlwm nyob deb kuj txhawb nqa nws txoj kev saws me nyuam. Tsis tas li ntawd, cov tuam txhab lag luam e-lag luam, cov kev pabcuam huab, thiab cov platforms digital pom cov qauv no yog lub sijhawm los txhim kho cov kev paub dhau los thiab ntxiv dag zog rau cov neeg siv kev ntseeg siab.

Muaj peev xwm txaus ntshai thiab cov teeb meem ntawm passwordless authentication

Zoo li txhua qhov kev tsim kho tshiab, kev lees paub tus password tsis muaj tseeb nthuav tawm cov teeb meem thiab qhov tsis zoo.:

• Cov khoom siv dependency: Poob los yog tub sab yuav tsum tau siv cov txheej txheem thaub qab zoo.
• Kev ceev ntiag tug thiab kev tiv thaiv ntawm cov ntaub ntawv biometric: Txawm hais tias khaws cia hauv zos, ib txwm muaj kev sib cav txog lawv txoj kev nyab xeeb.
• Vulnerabilities hauv xov tooj ntawm tes thiab SIMs: SIM tub sab, nyiag, lossis malware tuaj yeem cuam tshuam cov txheej txheem no.
• Compatibility nrog legacy platforms: Qee lub tshuab tseem tsis tau txhawb nqa cov txheej txheem no, yuav tsum tau siv cov passwords hauv qee kis.

Nws yog ib qho tseem ceeb uas cov koom haum npaj txoj kev hloov pauv nrog kev txhawb nqa tsim nyog thiab kev cob qhia cov neeg siv kom tsis txhob muaj teeb meem thiab ua kom muaj kev nyab xeeb rau kev saws me nyuam.

Alberto navarro

Kuv yog ib tus neeg nyiam siv thev naus laus zis uas tau hloov nws txoj kev nyiam "geek" rau hauv txoj haujlwm. Kuv tau siv ntau tshaj 10 xyoo ntawm kuv lub neej siv cov cuab yeej siv thev naus laus zis thiab tinkering nrog txhua yam kev pab cuam tawm ntawm kev xav paub dawb huv. Tam sim no kuv tau tshwj xeeb hauv computer technology thiab video games. Qhov no yog vim ntau tshaj 5 xyoo kuv tau sau rau ntau lub vev xaib ntawm kev siv tshuab thiab kev ua si video, tsim cov ntawv uas nrhiav kom muab cov ntaub ntawv koj xav tau hauv hom lus uas txhua tus neeg nkag siab.

Yog tias koj muaj lus nug, kuv qhov kev paub yog los ntawm txhua yam ntsig txog Windows operating system nrog rau Android rau cov xov tooj ntawm tes. Thiab kuv txoj kev cog lus yog rau koj, Kuv ib txwm kam siv ob peb feeb thiab pab koj daws cov lus nug uas koj muaj nyob hauv lub ntiaj teb no hauv internet.