Startups vow to eliminate passwords
(MoneyWatch) It's no secret that passwords -- the very basis of our online security -- are fundamentally flawed and insecure. It doesn't matter if you focus on user behavior (sharing the same password at multiple sites and creating simple, easy-to-crack codes) or on the back end where major sites frequently find their data compromised. Passwords are the single largest vulnerability in our modern lives.
Slowly but surely, major sites are starting to enhance passwords with additional security measures, like two-factor authentication. But some would like faster progress, and that's where the Petition Against Passwords comes in.
- The best passwords are the lengthy ones
- LivingSocial hack is wake-up call for passwords
- Turn on 2-step verification to enhance security
Let's be clear up front: This is hardly a real petition in the classic sense of the word. The petition has no particular target, and it's unlikely anyone will take action based on how many people sign up. But the page is structured like an infographic and has some interesting statistics about password insecurity. You can spread the word via a variety of social media outlets. It's more of a promotional effort.
The page is the brainchild of a group of tech start-ups, led by alternative password developer Clef. Clef offers an eponymous app that delivers security by forcing your smartphone to interact with the Web page you're trying to access. There's no password to remember; instead, the phone shares a secure key with the site automatically when you use the phone's camera to read an encrypted graphic on the screen.
This sort of password-free security is almost certainly the way of the future, but for the time being, we're stuck with using passwords and two-factor authentication to protect ourselves. Share the Petition Against Passwords if you like, but also stay safe in the here and now by following the key rules of creating strong passwords.
Photo courtesy Flickr user CarbonNYC