News

Microsoft's Edge Browser Debuts Password Alternative

The Microsoft Edge browser now supports the Web Authentication spec at the preview stage, Microsoft announced on Monday.

For Edge users, the support means it's now possible to test an alternative means of carrying out user authentications besides passwords.

The Web Authentication spec is a standard for the use of public key cryptography in credentials being developed by the Fast IDentity Online (FIDO) Alliance industry coalition and the Worldwide Web Consortium (W3C) organization. Currently, the Web Authentication spec is at the W3C's "Candidate Recommendation" stage, meaning that it's considered stable and is one step away from being a W3C "Recommendation" and ready for implementation.

The aim of the spec is to move away from using passwords for user authentications, which is conceived as problematic because passwords are subject to information disclosure and phishing attacks. Instead, user identities get verified by a fingerprint reader, a face scan or a personal ID number. A so-called FIDO 2.0 "companion device" may be used in the process, such as a wristband with near-field communication capabilities, a card swipe or a USB drive.

Microsoft currently supports the Web Authentication spec in build 17723 or higher of the Edge browser, which can be tested by Windows Insider Program participants. Microsoft also added FIDO 2.0 support in its Windows Hello biometric sign-in capability, which was released in the Window 10 April 2018 (version 1803) release. The Windows Hello capability is designed to work with Azure Active Directory-joined devices.

Microsoft indicated in its announcement that it is "working with industry partners on lighting up the first passwordless experiences around the web" with the Edge browser preview of the Web Authentication spec. However, other browser makers may already be at the same stage.

For instance, Google has already implemented the Web Authentication spec in its Chrome browser version 67, according to its status documentation. Mozilla also supports the Web Authentication spec in its Firefox browser version 60, according to its documentation, although it's described as being "experimental technology."

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.

Featured

  • Closeup of the new Copilot keyboard key

    Microsoft Updates Copilot To Add Context-Sensitive Agents to Teams, SharePoint

    Microsoft has rolled out a new public preview for collaborative "always on" agents in Microsoft 365 Copilot, bringing enhanced, context-aware tools into Teams channels, meetings, SharePoint sites, Planner workstreams and Viva Engage communities.

  • Windows 365 Cloud Apps Now Available for Public Preview

    Microsoft announced this week that Windows 365 Cloud Apps are now available for public preview. This aims to allow IT administrators to stream individual Windows applications from the cloud, removing the need to assign Cloud PCs to every user.

  • Report: Security Initiatives Can't Keep Pace with Cloud, AI Boom

    The increasingly fast adoption of hybrid, multicloud, and AI systems is easily outgrowing existing security measures, according to a recent global survey by the Cloud Security Alliance (CSA) and exposure management firm Tenable.

  • World Map Image

    Microsoft Taps Nebius in $17B AI Infrastructure Deal To Alleviate Cloud Strain

    Microsoft has signed a five-year, $17.4 billion agreement with Amsterdam-based Nebius Group to expand its AI computing capabilities through third-party GPU infrastructure.

Most   Popular