News

Microsoft's Edge Browser Debuts Password Alternative

The Microsoft Edge browser now supports the Web Authentication spec at the preview stage, Microsoft announced on Monday.

For Edge users, the support means it's now possible to test an alternative means of carrying out user authentications besides passwords.

The Web Authentication spec is a standard for the use of public key cryptography in credentials being developed by the Fast IDentity Online (FIDO) Alliance industry coalition and the Worldwide Web Consortium (W3C) organization. Currently, the Web Authentication spec is at the W3C's "Candidate Recommendation" stage, meaning that it's considered stable and is one step away from being a W3C "Recommendation" and ready for implementation.

The aim of the spec is to move away from using passwords for user authentications, which is conceived as problematic because passwords are subject to information disclosure and phishing attacks. Instead, user identities get verified by a fingerprint reader, a face scan or a personal ID number. A so-called FIDO 2.0 "companion device" may be used in the process, such as a wristband with near-field communication capabilities, a card swipe or a USB drive.

Microsoft currently supports the Web Authentication spec in build 17723 or higher of the Edge browser, which can be tested by Windows Insider Program participants. Microsoft also added FIDO 2.0 support in its Windows Hello biometric sign-in capability, which was released in the Window 10 April 2018 (version 1803) release. The Windows Hello capability is designed to work with Azure Active Directory-joined devices.

Microsoft indicated in its announcement that it is "working with industry partners on lighting up the first passwordless experiences around the web" with the Edge browser preview of the Web Authentication spec. However, other browser makers may already be at the same stage.

For instance, Google has already implemented the Web Authentication spec in its Chrome browser version 67, according to its status documentation. Mozilla also supports the Web Authentication spec in its Firefox browser version 60, according to its documentation, although it's described as being "experimental technology."

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.

Featured

  • IBM Giving Orgs a Governance Lifeline in Agentic AI Era

    Nearly overnight, organizations are facing brand-new challenges caused by self-directed AI systems (a.k.a. agentic AI). Big Blue is extending them some help.

  • Microsoft Launches Integrated E-mail Security Ecosystem for Defender for Office 365

    Microsoft is expanding its e-mail security capabilities with the launch of a new Integrated Cloud Email Security (ICES) ecosystem for Microsoft Defender for Office 365.

  • Microsoft Joins Workday's AI Agent Partner Network

    Microsoft has become a key partner in Workday's newly launched AI Agent Partner Network, aligning with other industry leaders to integrate AI agents into enterprise workforce systems.

  • LinkedIn CEO Ryan Roslansky To Lead Microsoft's Productivity Initiatives

    In a strategic leadership realignment, Microsoft has appointed LinkedIn CEO Ryan Roslansky to oversee its consumer and small business productivity software division, encompassing Microsoft 365, Teams and AI-driven tools like Copilot.