0:12
what do you want i'm in jo I got a
0:19
passwords we don't use passwords anymore
0:27
pass key what's up ASI
0:34
we're the beginning of the end of
0:37
passwords as the primary way we protect
0:39
our information if somebody wants to
0:41
steal your information one of the best
0:43
ways to do it is to get a hold of your
0:45
password something that most folks use
0:48
over and over again on lots of accounts
0:51
even though experts say "Don't do that."
0:54
The pass key solves that problem if you
0:58
don't have to remember a password to
1:00
access your account guess what you can't
1:04
accidentally give it to a bad guy in a
1:06
scam cuz that's one of the ways they get
1:08
that password and log is they as some
1:11
sort of a fishing attack or some sort of
1:13
a scam that gets you to give it up so
1:15
you probably want to know what makes a
1:17
pass key more secure than a password
1:20
well first of all they're generated on a
1:23
specific website for one-time use only
1:26
also they often use biometrics for
1:29
identification purposes once they're
1:32
generated they are not stored on any
1:34
server and finally they are not
1:37
vulnerable to any kind of fishing attack
1:40
you think you're talking to a legitimate
1:42
representative of the IRS for example
1:44
and you're not you're talking to a
1:45
criminal but you give up that login and
1:48
password you can't do that with a pass
1:50
key and the other reason is it's on the
1:52
other side of that transaction what that
1:54
means is that half the pass key shows up
1:57
on your device the other half stays with
2:00
the website or app that you're trying to
2:03
access and only when you complete your
2:06
end of the pass key do the two sides
2:09
hook up allowing you in they don't store
2:12
the information because every time you
2:15
log in it's a new number it's a randomly
2:18
generated number so that means if
2:20
there's a data breach it can't be stolen
2:23
so we've now removed for those
2:25
organizations have pass keys the entire
2:28
ability to have an entire class of
2:30
attack against them some websites are
2:33
now pushing users to adopt authenticator
2:35
apps and security keys those are
2:38
different from the pass key and they're
2:40
not as effective the security key is a
2:43
physical device that plugs into your
2:46
device that's used in conjunction with
2:48
two-factor authentication as is the
2:51
authenticator app which helps generate a
2:54
one-time only password with Google
2:57
Amazon and Microsoft all supporting the
3:00
adoption of pass keys they're gaining
3:03
more traction as a security measure and
3:05
experts say we should start seeing them
3:08
come into more general use in the next
3:10
year or two working for you i'm the
3:12
consumer guy Steve Spraer
