Ungavumelanisa kanjani ama-passkey phakathi kwamadivayisi futhi ungazami

I-Las okhiye bokungena noma okhiye bokufinyelela Bashintsha ngokuphelele indlela esingena ngayo kumawebhusayithi nezinhlelo zokusebenza. Asikho isidingo sokubamba ngekhanda amaphasiwedi ayinkimbinkimbi noma ukuthumela amakhodi e-SMS njalo: vele uvule ifoni yakho, sebenzisa iminwe yakho, ubuso, noma i-PIN, bese uqedile. Futhi into ethakazelisa kakhulu yokusetshenziswa kwansuku zonke ukuthi lezi ziqinisekiso zingaba ukuvumelanisa phakathi kwamadivayisi ngokuphepha.

Uma uzibuza Indlela yokuvumelanisa ama-passkey phakathi kwamadivayisiIyiphi indima edlalwa yi-Google, i-Apple, i-Microsoft, noma abaphathi bamaphasiwedi? Kwenzekani uma ulahlekelwa yifoni yakho ephathekayo? Iziphequluli ezifana ne-Chrome noma izinsizakalo ezifana ne-Amazon, i-HubSpot, noma i-Microsoft Authenticator ziziphatha kanjani? Nasi umhlahlandlela ophelele ohlanganisa lonke lolo lwazi, oluchazwe ngamagama alula futhi ucabange ngokusetshenziswa kwakho kwangempela.

Ayini ngempela ama-passkey futhi kungani ethatha indawo yamaphasiwedi?

Okhiye bokudlula kukhona iziqinisekiso ze-cryptographic zokhiye womphakathi nowangasese Lawa athatha indawo yamaphasiwedi avamile. Esikhundleni sokuthayipha umbhalo othile angawuntshontsha noma awuqagele, idivayisi yakho ikhiqiza ukhiye obhangqiwe: ukhiye womphakathi ogcinwe kuseva yesevisi (i-Google, i-Amazon, inyuvesi yakho, njll.) kanye nokhiye wangasese ohlala uvikelekile kufoni yakho ephathekayo, ikhompyutha, noma iketanga lokhiye ledijithali.

Uma ungena ngemvume ngama-passkey, isevisi ikunikeza inselelo, bese idivayisi yakho isayina leyo nselelo nge- ukhiye wangasese ugcinwe ngokuphephileLeso sikhiye asiphumi kudivayisi; iseva ibona kuphela isiginesha kanye nesikhiye somphakathi esivele sibhalisiwe. Yingakho kunzima kangaka ukuseba, ukusisebenzisa kabusha, noma ukusisebenzisa ekuhlaselweni okukhulu.

Ngokungafani namaphasiwedi akudala, ama-password aklanyelwe ukuba amadivaysi amaningi kanye ne-multi-platformBathembele ezimisweni zemvelo ze-Apple, Google, Microsoft, kanye naku- Abaphathi bephasiwedi abahambisana ne-FIDO2 (1Password, Dashlane, Bitwarden, njll.) ukuze ukwazi ukuvumelanisa ukubethelwa kusukela ekuqaleni kuya ekugcineni phakathi kwamadivayisi akho.

Ngaphezu kwalokho, ama-passkey asebenza njenge- ukuqinisekiswa kwezinto eziningi okuku-in-oneBahlanganisa into onayo (idivayisi noma umphathi) nento oyaziyo noma oyaziyo (i-biometrics noma i-PIN yokuvula). Ngakho-ke, ezimweni eziningi, awusadingi ukwengeza imiyalezo ye-SMS, amakhodi e-TOTP, noma izinhlelo zokusebenza ezengeziwe zokuqinisekisa izinto zesibili, okunciphisa ukungqubuzana kanye nobuthakathaka.

Izinzuzo zokuphepha kanye nolwazi lomsebenzisi ngokusebenzisa ama-passkey

Ama-passkey alapha ukuvala cishe zonke izikhala kumaphasiwedi. Ngokombono wokuphepha, umehluko mkhulu kakhulu: ngamaphasiwedi, ukwephulwa kwedatha kungashiya izinkulungwane zama-akhawunti eveziwe; ngama-passkey, kunokhiye owodwa kuphela kuseva. okhiye bomphakathi abangenalo inani kubo.

Esinye isici esibalulekile yi- ukumelana nobugebengu bokweba imininingwane ebucayiNgenxa yokuthi i-passkey ixhunywe nge-cryptographic kusizinda esithile, isebenza kuphela kusayithi elisemthethweni eladalelwa lona. Ayikho insimu yombhalo lapho ungafaka khona iphasiwedi yakho kuwebhusayithi mbumbulu; isiphequluli kanye nesistimu yokusebenza kuqinisekisa isizinda ngaphambi kokusebenzisa iziqinisekiso.

Inkinga ye... iyanyamalala futhi. ukusetshenziswa kabusha kwephasiwedi kuzo zonke izinsizakalo eziningiIphasiwedi ngayinye ihlukile kusayithi noma kuhlelo lokusebenza; ayikho indlela "yokuyikopisha" bese uyisebenzisa kwenye indawo. Lokhu kuqeda ngempumelelo ukuhlaselwa okuningi okuhambisana neqiniso lokuthi sisebenzisa iphasiwedi efanayo yonke indawo.

Ngokuphathelene nolwazi lomsebenzisi, okuqaphelayo ekusebenzeni ukuthi ukungena ngemvume kuba ngokushesha futhi kululaEsikhundleni sokukhumbula nokuthayipha umbhalo omude, umane ukhethe okuthi "Ngena ngemvume nge-passkey" bese uqinisekisa ngeminwe yakho, ubuso, noma i-PIN. Akudingeki futhi ukuthi ushintshe amaphasiwedi njalo noma uwahlanganise ukuze "avikeleke."

Okokugcina, ukuqinisekiswa kwe-passkey kuvame ukusebenza ngisho nangaphandle kokuxhumeka kwe-inthanethi yendawo: Inqubo ye-cryptographic yenziwa kudivayisi yakho.Udinga uxhumano lwe-inthanethi kuphela ukuze uxhumane neseva yesevisi, udale amaphasiwedi amasha, noma uwavumelanise kumadivayisi ahlukene ngefu.

Indlela i-Google evumelanisa ngayo ama-passkey phakathi kwe-Android, i-Chrome, nezinye izinhlelo

Kuhlelo lwe-Google, ama-passkey athembele kakhulu ku- Umphathi wephasiwedi ye-Google (Umphathi Wephasiwedi we-Google, i-GPM). Ku AndroidKu-Chrome nakwezinye izinhlelo, lo mphathi unesibopho sokugcina nokuvumelanisa okhiye bakho bokufinyelela ngendlela ebethelwe kusukela ekuqaleni kuya ekugcineni ne-Akhawunti yakho ye-Google.

Kuze kube muva nje, izinto bezihlukene kakhulu: ku-Chrome ye-macOS, ama-passkey alondolozwa ngokuzenzakalelayo ku- ICloud Keychain futhi, ngokuzikhethela, endaweni yakini kuphrofayela ye-Chrome; ku-Android, ku-Google Password Manager naphakathi kwamadivayisi e-Android kuphela; naku WindowsBabevame ukugcina besebenzisa iWindows Hello noma isitoreji indawo

Ngezinguquko zakamuva, i-Chrome enephrofayili yokungena ngemvume ku-macOS, Windows, Linux noma i-ChromeOS (ku-beta) ingakwazi Dala ama-passkey ngqo ku-Google Password ManagerZigcine lapho bese uzisebenzisa ukuqinisekisa. Noma yisiphi isiphequluli se-Chrome esisebenzisa leyo phrofayela efanayo ye-Google komunye umshini sizokwazi ukuvumelanisa lawo ma-passkey futhi siwasebenzise njengokungathi adalwe endaweni.

Ukuze kuvikelwe ukufinyelela phakathi kwamadivayisi, i-Google yethula I-PIN ethile ye-Google Password ManagerLe PIN, noma yakho indlela yokuvula Ku-Android, isebenza njengento yokutakula: uma uqala ukusebenzisa ama-passkey kudivayisi entsha, kuzodingeka ufake leyo PIN noma usebenzise ukuvula kwe-biometric kweselula yakho ukuze ulande futhi usebenzise ama-key agcinwe ku-akhawunti yakho.

Empeleni, lokhu kusho ukuthi uma unezinkinobho zokudlula ezilungiselelwe ku-Android, uzokwazi Zisebenzise kukhompyutha yakho nge-Chrome. (iWindows, i-macOS, i-Linux, i-ChromeOS) uma nje ungena ngemvume nge-Akhawunti ye-Google efanayo futhi uqinisekise nge-PIN yakho noma ukuvula ngeselula. Konke lokhu kwenziwa ngaphandle kokuthi i-Google ikwazi ukufunda ama-passkey akho, njengoba ebethelwe kusukela ekuqaleni kuya ekugcineni.

Ukuvumelanisa ama-passkey kuwo wonke ama-Apple, i-Microsoft, kanye nabaphathi bamaphasiwedi

Kwa-Apple, ama-passkey agcinwa futhi avumelaniswe kusetshenziswa i- ICloud Keychain. Uma une iPhone, a iPad futhi a Mac Ngaphansi kwe-Apple ID efanayo, ama-passkey owadala kunoma yiliphi lawo azovela ngokuzenzakalelayo kwamanye, inqobo nje uma ukuvumelanisa i-Keychain kusebenza.

Lokhu kuvumelanisa kukuvumela, isibonelo, ukuthi udale ukhiye wokudlula kusuka ku-Safari ku-Mac yakho, bese kamuva... Ngena ngemvume kusuka kuhlelo lokusebenza lweselula lwensizakalo ku-iPhone yakho kusetshenziswa i-Face ID noma i-Touch ID. Ngaphezu kwalokho, i-Apple isebenzisa hardware vikela (njenge-Secure Enclave) ukuze kugcinwe okhiye abayimfihlo bevikelwe kudivayisi ngayinye.

KuMicrosoft, uhlelo lwe-ecosystem lujikeleza IWindows Windows kanye ne-Microsoft AuthenticatorI-Windows 10 kanye Windows 11 Bahlanganisa ama-passkey ku-Edge, Chrome, nakwezinye iziphequluli ezihambisanayo, besebenzisa ukuqashelwa kobuso, izigxivizo zeminwe, noma i-PIN. Lezi ziqinisekiso zingavunyelaniswa nge-akhawunti yakho ye-Microsoft noma zixhunywe ngokuqinile kudivayisi, kuye ngesiphequluli.

Icala elithile yilelo le-“ama-passkey axhunywe kudivayisi"Ku-Microsoft Authenticator, njengalezo ezisetshenziswa yi-UCLM: lawa ma-passkey awavumelani nefu futhi agcinwa kuphela kudivayisi yeselula lapho adalwe khona. Lokhu kwenezela ukuphepha (akukho ukusekela ngokulondoloza ifu), kodwa kudinga ukuthi uhlale unawo." izindlela zokutakula ezihlukile (isibonelo, i-Cl@ve noma amakhodi esikhashana) uma kwenzeka ulahlekelwa yidivayisi.

Ngaphezu kwezinhlelo zemvelo ezinkulu, abaphathi abaningi bephasiwedi beqembu lesithathu abafana 1Password, Dashlane noma Bitwarden Sezivele zisekela ama-passkey. Kulezo zimo, asebenza njenge-keychain ehlukile, evumelanisekayo: udala i-passkey kanye kumphathi futhi ungayisebenzisa kunoma iyiphi idivayisi lapho unokufinyelela khona kulowo mphathi, kungakhathaliseki ukuthi yi-Android. iOSI-Windows, i-Linux noma i-macOS.

Indlela yokusetha ama-passkey ngesistimu yokusebenza kanye nesiphequluli

Ukuze ukuvumelanisa kusebenze kahle, isinyathelo sokuqala ukuba nendawo ilungele ipulatifomu ngayinye. Kumadivayisi e-Apple (i-iOS, I-iPadOS, macOS) okudingayo izinguqulo zakamuva zesistimuNgokuvamile, i-iOS 16 noma i-iPadOS 16 noma kamuva, kanye ne-iCloud Keychain kuyasebenza. Kungumqondo omuhle futhi ukuhlola ukuthi i-Safari kanye nokunye Izinhlelo zokusebenza Sebenzisa isici sokugcwalisa ngokuzenzakalela iphasiwedi kanye ne-passkey yesistimu.

Ku-Android, imfuneko eyisisekelo ukuba nayo I-Android 9 noma ngaphezulu enamasevisi e-Google Play abuyekeziweKodwa-ke, ezinye izinhlelo eziningi ezithuthukisiwe (njengezinye ezivela ku-Authenticator) zidinga i-Android 14. Kumelwe ube nokusetha okuphephile kokukhiya isikrini (i-PIN, iphethini, iphasiwedi, noma i-biometrics) kanye ne-"Autofill with Google" evuliwe, okuyilapho kuhlala khona i-Password Manager ye-Google.

Ku-Windows, udinga i-Windows 10 (inguqulo 1903 noma kamuva) noma i-Windows 11, kanye nesiphequluli esihambisanayo (i-Chrome, i-Edge, i-Firefox ezinguqulweni zanamuhla). Konke kusekelwe kulokho. I-Windows Hello njengomqinisekisi wendawoUma isilungisiwe, isiphequluli singabhalisa futhi sisebenzise ama-passkey ahlobene ne-akhawunti yakho. I-akhawunti ye-Microsoft noma, kuye ngesevisi, zigcine nakumphathi owuthandayo.

Uma uhlelo selulungile, inqubo ivame ukuphindwa cishe yonke indawo: uvakashela isayithi elihambisanayo (i-Google, i-Amazon, i-GitHub, i-HubSpot, i-Soyio, izinsizakalo zeyunivesithi yakho, njll.), iya esigabeni sokuphepha noma sokubhalisa, bese ukhetha “Dala ukhiye wokungena” noma “Engeza indlela yokuqinisekisa” Bese ulandela imiyalelo. Idivayisi izocela i-Face ID, i-Touch ID, i-Windows Hello, i-PIN, noma yini efanelekile, bese kuba yilapho-ke, i-passkey ibhalisiwe.

Kusukela ngaleso sikhathi kuqhubeke, njalo uma ubuyela kusayithi uzobona inketho efana nokuthi “Ngena ngemvume nge-passkey" noma "Sebenzisa iphasiwedi". Ufaka i-imeyili yakho noma igama lomsebenzisi (uma ucelwa), isiphequluli sibuza uhlelo lwakho noma i-akhawunti yakho umphathi wephasiwedi futhi udinga kuphela ukuvuma ngendlela yakho ye-biometric noma i-PIN.

Izibonelo zomhlaba wangempela: i-Google, i-Amazon, i-HubSpot, i-Soyio, kanye nezindawo zaseyunivesithi

I-Google ikhuthaza kakhulu ama-passkey kumasevisi ayo. Ungawalungiselela kuzilungiselelo zokuphepha kwe-akhawunti yakho. dala ama-passkey ahlobene namadivayisi ahlukene (Iselula ye-Android, i-laptop, njll.) bese ubona uhlu lwamadivayisi lapho asebenza khona, kanye nolwazi ngokusetshenziswa kwawo kokugcina. Konke lokhu kuvumelaniswa nge-Akhawunti yakho ye-Google kanye ne-Password Manager.

I-Amazon iphinde yafaka ama-passkey okufinyelela ama-akhawunti abasebenzisi. Kusukela esigabeni esithi "Ngena ngemvume kanye nokuphepha", ungafinyelela isigaba sama-passkey, chofoza okuthi "Setha," bese usuka lapho, Dala ukhiye wokudlula owodwa noma ngaphezulu kumadivayisi akho athembekileUkungena ngemvume okulandelayo kuhlanganisa ukukhetha okuthi "Ngena ngemvume nge-Passkey" bese uqinisekisa nge-biometrics noma i-PIN, kanye nenketho yokugcina ukuqinisekiswa kwezinyathelo ezimbili njengesendlalelo esengeziwe.

Emkhakheni webhizinisi, amapulatifomu afana neHubSpot anezikhiye zokungena ezihlanganisiwe ukuze kube lula ukungena ngemvume okungenaphasiwedi Kokubili kudeskithophu kanye nakuzinhlelo zokusebenza zayo zeselula. Kusukela kuzilungiselelo zokuphepha kwe-akhawunti yakho, ungakha ukhiye wokufinyelela womuntu siqu, kuye ngedivayisi yakho, ozogcinwa ku-keychain yesistimu noma kumphathi wakho wephasiwedi ohambisanayo.

Izinsizakalo zobunikazi ezifana ne-Soyio zihambe ibanga elide futhi zihlanganisa ama-passkey ngaphakathi imisebenzi yokuqinisekisa ubuwena, imvume, kanye nokusayina idokhumentiNgesikhathi senqubo yokubhalisa, umsebenzisi angabhalisa ukhiye wokungena oxhunywe kubunikazi obuqinisekisiwe, bese ewusebenzisa ukuqinisekisa ukuthengiselana okubucayi, ukusayina amadokhumenti, noma ukuphatha izimvume.

Ezilungiselelweni zaseyunivesithi, njengase-UCLM, i-Microsoft Authenticator isetshenziselwa ukumisa "ama-passkey" ahlobene ne-akhawunti yesikhungo. Lawa ma-passkey agcinwa endaweni kudivayisi yeselula futhi awavumelaniswa nefu, ngakho-ke Idivayisi ngayinye inokhiye wayoUma ulahlekelwa ifoni, ungasebenzisa uhlelo lwe-Cl@ve noma ezinye izindlela ukukhiqiza amakhodi esikhashana bese usetha iphasikhodi entsha kwenye idivayisi.

Kwenzekani uma ulahlekelwa idivayisi enama-passkey

Ukulahlekelwa ifoni noma i-laptop yakho kuhlale kuyesabisa, kodwa indlela ama-passkey aklanywe ngayo yenza isimo singabi bucayi njengoba sibonakala. Ezindaweni eziningi zesimanje, ama-passkey akhona Zivumelanisa efwini lepulatifomu. (iCloud Keychain, i-Akhawunti ye-Google, i-akhawunti ye-Microsoft noma umphathi wephasiwedi weqembu lesithathu), ukuze okhiye abafanayo bahlale betholakala kwamanye amadivayisi akho.

Isibonelo, uma ulahlekelwa yi-iPhone kodwa une-iPad noma i-Mac ene-Apple ID efanayo, ama-passkey akho azobe esekhona; okufanayo kuyasebenza uma ubunama-passkey avumelanisiwe ne-akhawunti yakho ye-Google futhi usenayo enye idivayisi ye-Android noma ikhompyutha ene-Chrome lapho usangene khona kuleyo akhawunti. Kulezi zimo, ukulahlekelwa yidivayisi akusho ukuthi ukulahlekelwa ukufinyelela kuma-akhawunti akho.

Kodwa-ke, kubalulekile ukuthi i-akhawunti yefu noma umphathi lapho ama-passkey evumelaniswa khona avikelwe nge- iphasiwedi eqinile kanye nokuqinisekiswa kwezinto ezimbili (2FA)Uma kungenjalo, uma umhlaseli ekwazi ukufinyelela kuleyo akhawunti enkulu, angazama ukusebenzisa ama-passkey akho kwamanye amadivayisi.

Uma uzithola usesimweni esibi kakhulu futhi ulahlekelwa yiwo wonke amadivayisi akho, uhlelo ngalunye lunikeza izinketho zalo zokutakula: okhiye bokutakula, izinqubo zokuqinisekisa eziqinile, ukwesekwa kobuchwepheshe okukhethekile, njll. Kuwukuhlakanipha ukwazi kusengaphambili ukuthi yini izinqubo zokubuyisela Umhlinzeki ngamunye (i-Apple, i-Google, i-Microsoft, umphathi wakho wephasiwedi) unikeza futhi ugcina izindlela zakhe zokuxhumana nezokubuyisa zisesikhathini.

Ezindaweni lapho ama-passkey engavumelanisi khona (njenge-passkey eboshwe yidivayisi ku-Microsoft Authenticator), udinga ukuba nesibindi: lungiselela ukhiye kumadivayisi amaningi uma kungenzeka futhi ugcine izindlela zokufinyelela ezihlukile (amakhodi esikhashana, izinhlelo ezifana ne-Cl@ve, i-imeyili yokutakula) zibuyekeziwe futhi ziyatholakala.

Izindlela ezinhle kakhulu zokuvumelanisa nokuvikela amaphasiwedi akho

Ukuze ukuvumelanisa idivayisi kusebenze kahle futhi kungabi yindawo ebuthaka, kubalulekile ukunakekela izici ezimbalwa eziyisisekelo. Okokuqala ukuqinisekisa ukuthi Qiniseka ukuthi wonke amadivayisi akho nezinhlelo zokusebenza zisesikhathiniUkuthuthukiswa okuningi kokuphepha kanye nezici zokuhambisana kwe-password zifika ngezibuyekezo zesistimu yokusebenza, isiphequluli, noma umphathi wephasiwedi.

Kuyafaneleka futhi ukumisa ama-passkey ku- amadivayisi athembekile angaphezu kweyodwaIsibonelo, efonini yakho yansuku zonke yeselula kanye ne-laptop yakho, noma efonini yakho ephathekayo kanye nethebhulethi yakho. Ngale ndlela, uma enye yazo yehluleka noma iphuka, uzobe usenenye indlela eqondile yokungena ngemvume bese udala ama-passkey amasha noma uhoxise amadala.

Omunye umkhuba omuhle ukuhlola ngezikhathi ezithile ingxenye yokuphepha yama-akhawunti akho abalulekile (i-Google, i-Apple, i-Amazon, i-Microsoft, i-HubSpot, njll.) ukuze Susa okhiye bokudlula abahlobene namadivayisi ongasawasebenzisiLokhu kunciphisa indawo yokuhlasela futhi kukuvumela ukuthi ube nokulawula okucacile kokuthi yiziphi iziqinisekiso ezisasebenza.

Uma uthembela kubaphathi bephasiwedi benkampani yangaphandle ukuze uthole ama-passkey akho, hlola ukuthi unayo Ukuvumelanisa okuphephile phakathi kwamadivayisi, okuhlanganisa i-2FA, okhiye abaqinile abayinhloko, kanye nezinketho zokubuyisa ezinganciphisi ukuvikelwa (gwema, isibonelo, ukubuyisa i-akhawunti ebalulekile nge-SMS elula nje).

Okokugcina, ungakhohlwa ukugcina izindlela zakho zokutakula zendabuko zisesikhathini: ama-imeyili ahlukile, izinombolo zocingo zokutakula, amakhodi okusekelayo, nanoma yiziphi ezinye izinketho ezinikezwa umhlinzeki wakho. Ngisho noma ama-passkey ephephile kakhulu, Ukubuyiselwa kwe-akhawunti kuseyinkinga ebalulekile futhi kufanele kuqashelwe njalo.

Njengoba wonke la magiya esekhona—izinhlelo zemvelo ezibuyekeziwe, ama-passkey avumelaniswe ngokuphephile, amadivayisi amaningi athembekile, kanye nezindlela zokubuyisa eziqinile—uzothola okuningi kuma-passkey: ukungena ngemvume okusheshayo nokulula kakhulu, intuthuko enkulu ekuphepheni kwe-phishing, kanye nokuthula kwengqondo kokwazi ukuthi noma ngabe idivayisi ilahlekile noma iphukile, Ubuwena bakho bedijithali abugcini emoyeni.