Google Introduces Passkeys to Enhance Security for Businesses

Google is taking security to the next level with the introduction of passkeys for its major platforms. More than 9 million organizations can now let their users log in to Google Workspace and Google Cloud accounts using passkeys instead of passwords.
This week, Google announced that it is offering passkey functionality to businesses by extending an open beta program to enterprise customers using the Google Workspace and Google Cloud platforms.
Shruti Kulkarni, Engineering Manager and Jeroen Kemperman, Product Manager for Google Workspace, announced the introduction of the passkey feature in a blog post on Monday.

What are Passkeys?

Passkeys are a passwordless login method that provide “a convenient and secure authentication experience” for websites and apps, according to Google. Users can log in using fingerprint, facial recognition or any other screen lock mechanism on phones, laptops or desktops. Passkeys are based on an industry standard developed by the FIDO Alliance. They are available in popular browsers and operating systems that people use every day. These include Android, ChromeOS, iOS, macOS, and Windows.
Unlike passwords, passkeys do not need to be remembered or typed. In addition, they cannot be written down or accidentally given to a malicious person. Passkeys are just easier to use if they work properly. Internal research has also shown that passkeys are two times faster and four times less error-prone than passwords, according to Google.
At the beginning of May, Google made passkeys available as an additional sign-in option for personal Google accounts. The new beta program unveiled this week also allows Google business users to sign in with a passkey.

How it Works

When a user logs in to their Workspace apps with a passkey, such as Gmail or Google Drive, the new login method can confirm that a user has access to their device and unlock it with biometrics. These are never sent to Google’s servers or other websites and apps.
The use of passkeys is not mandatory. Google explains that users will still be able to use passwords to sign in to their work and personal Google accounts. However, the tech giant adds that passkeys “could provide a simpler and more secure alternative and reduce the impact of phishing and other social engineering attacks.”
Google’s introduction of passkeys is a welcome addition to the security landscape. With the increasing prevalence of cyber threats, businesses need to ensure that their data is secure and their users are protected. Passkeys provide an additional layer of security that can help businesses protect their data and their users.