Google experiments with alternatives to static passwords


Google is currently experimenting with new ways to replace the static password, according to a report on Wired. In a new research paper, the search engine giant detailed its experiment with various authentication methods, including using the Yubico cryptographic card. The paper is scheduled for publication in IEEE Security & Privacy Magazine later this month.

Google (NASDAQ: GOOG) envisions a future where a smartcard-embedded finger ring can be used to authorize a new computer with just a tap, and will function even without cellular connectivity.

Much like how a car key works, this device can be used to launch a webmail session and log into various online services.  For now, the Yubico card is a miniature device that plugs into a standard USB port to help a user to login automatically. The smallest version listed on the company's website is the YubiKey Nano, which is so small that it barely protrudes out of a USB socket.

Google says it had to modify its web browser to work with the YubiKey; though the enrollment process appears to be easy once support is built in. According to Wired, "You log into the website, plug in the USB stick and then register it with a single mouse click."

For more:
- check out this article at Wired

Related Articles:
RIM moves to block commonly used passwords
Dropbox announces new security measures in wake of hacked employee account