US tech titans look to ditch passwords

Apple, Google and Microsoft said Thursday they are looking to get rid of passwords and replace them with a more secure way to access accounts or devices.

The U.S. tech titans jointly announced support for a common standard that will let people sign in by unlocking their mobile phones, say, with fingerprint or face recognition.

"The complete shift to a passwordless world will begin with consumers making it a natural part of their lives," said Microsoft vice president Alex Simons.

"By working together as a community across platforms, we can at last achieve this vision and make significant progress toward eliminating passwords."

Reliance on passwords alone is decried as a major security flaw on the internet, with people keeping them overly simple or using the same one repeatedly to make it easier to manage many accounts.

Adopting standards created by the FIDO Alliance and the Word Wide Web Consortium will let websites and device makers build secure, passwordless options into their offerings, the groups said in a release.

Using secure keys instead of passwords would stymy phishing scams that trick people into disclosing log-in credentials and hackers that steal such data.

"Today is an important milestone in the security journey to encourage built-in security best practices and help us move beyond passwords," U.S. cybersecurity and infrastructure security agency director Jen Easterly said.

Support for password-free log-ins will be woven into Android and Chrome software over the course of the coming year, said Google product manager and FIDO Alliance president Sampath Srinivas.

Apple and Microsoft announced plans to do likewise with their software.

"This will simplify sign-ins across devices, websites...