Google says that difficult passwords are not important; the instant connection is a solution

The experience that we know as the password could be radically improved for the better of here a year and a half to three years.

Are you striving to create long strings of uppercase, lowercase letters, numbers, and complex symbols? It's so yesterday.

It's hope, anyway.

In a fascinating interview with Google Product Manager Mark Risher, The edge this week, he outlined his vision of why the passwords we were asked to create do not really help us.

They have "no impact on phishing, no impact on password violations, no impact on password reuse," he said. "We think it's much more important to reduce the total number of passwords."

In other words, all the time you have had to spend creating passwords that are more difficult to decipher is a waste. At least, that's what he seems to see.

I think all Talking Tech readers would agree that anything we could do to eliminate the constant seizure of passwords during our daily hours would be welcome.

But how to get there?

Google wants you to use its single sign-on feature, which always requires a password and allows Google to authenticate your identity, for a second level of authority, via text messages or via Google's smartphone app.

Apple has just announced its response to the Google connection, with an alternative that will be introduced to the iPhone and the iPad in the fall, as part of the upgrade of the iOS13 software. According to the IDC market tracker, Google has an 85% market share for its Android phone system, compared to 14.9% for Apple.

"Between them, it's everyone's phone system," said Bob Rudis, chief scientist of the Rapid 7 security company. "Everyone will have it by default over the next 18 to Next 36 months. "

For years, Facebook and Google have been offering consumers the option of forgetting to have to remember their multiple passwords and use their single sign-on system to access websites. These tools do not even require the entry of a screen name and passwords, just one click on the "Login With" tab of Facebook or Google.

Apple hopes to go a step further by using the Face ID and Touch ID biometric features of the iPhone and iPad to avoid these clicks. If a website or app requests an email address, Apple "will create a unique email address that will be sent to your real address," the company said.

In this case, how is SSO more secure if Facebook is in charge? This is not, say the security experts. "They showed that we could not trust our information," said Rudis.

However, Google is more trustworthy and Apple is the best of the trio, he added, because of his public commitment to privacy.

Both are super convenient. Who would not prefer to click on a Facebook or Google icon instead of having to re-enter your name and password?

But all the people we talked to did not agree that we can let go and forget about difficult passwords.

Even Google, on its website, recommends at least 8 characters, as well as combinations of letters, numbers and symbols. Apple has the same requirements, with at least a minimum number. "You can also add extra characters and punctuation to reinforce your password," said the company.

"You can also make the password more complex by lengthening it with a phrase or a series of words that you'll remember easily, but no one else knows," says Facebook.

Andy Halverson, who runs the IT for the Ooyala video company, uses a password manager and allows him to create and remember difficult passwords, not to be forced to do so. It uses the Dashlane password manager, but there are many more, including Lastpass and 1Password.

"I like single sign-on, but it's another handy tool," he says.

James Litton, CEO of the security company Identity Automation, does not think that single sign-on helps to get much. "If it's a horrible password, your security situation has not improved," he says.

He likes super long passwords, ranging from 32 to 64 characters, but stored in a password manager. With a manager, you enter a master password and the software connects you.

"It's harder for a bad guy to pick words from a dictionary for a hack attack if I'm going away for a long time," he says.

Meanwhile, for the moment, Rudis says that a combination of long passwords and a password manager will lead us "to this nirvana to be able to register with just one connection, " all over.

It will take time. First, Apple will have to convince hundreds of thousands of websites to add its unique authentication system, which will not be easy. Apple, Google and Facebook have huge upcoming sales. For example, although you can connect to Barnes and Noble and Kroger with Google, this option is not available on many leading websites, including Target, Walmart, American Airlines, Verizon Wireless, and Home Depot. .

In other new techniques this week

Elon Musk has announced a new Tesla video game at the E3 conference: the "Beach Buggy Racing 2" racing game will use the Tesla steering wheel and can be played in his car. Musk warned that the car must be in the park to play.

Speaking of games, the PlayStation game system briefly stopped Thursday for about four hours. According to the PlayStation Status Indicator page, there were account management, gaming, and social issues, PlayStation Now, PlayStation Video, PlayStation Music, and PlayStation Music.

A leak of the next edition of Google's Pixel phone is online this week. Once technology blogs discovered image leaks, Google acted unexpectedly: the search giant went on social media to publish real photos of the next generation smartphone months before its planned release . On Wednesday, Google dropped the rendition on Twitter with the following caption: "Well, as there seems to be some interest, it's all over! Wait to see what you can do. # Pixel4." Google traditionally introduces new material in the fall.

And ICYMI, I offered photo tips that will allow you to get better holiday photos with your smartphone. Do you know the trick of applying flashlight for food or timer for selfies? Check it out!

This week's Talking Tech podcasts

Hey Google, why are you following each of my movements?

More about Google tracking

Kristina Kumic takes videos on Father's Day

How to use technology to organize interviews

Mattel launches new Hot Wheels wheels

That's all for Talking Tech news. Subscribe to the newsletter, http://technewsletter.usatoday.com, listen to the Talking Tech daily podcast wherever you are with audio and follow me (@jeffersongraham) on Twitter, Instagram and YouTube.

Read or share this story: https://www.usatoday.com/story/tech/talkingtech/2019/06/15/google-says-tough-passwords-dont-matter-instant-sign-solution/1461379001/