{"id":146763,"date":"2019-08-14T22:04:11","date_gmt":"2019-08-14T22:04:11","guid":{"rendered":"http:\/\/sftarticles.wpenginepowered.com\/en\/?p=146763"},"modified":"2025-07-01T21:34:45","modified_gmt":"2025-07-02T04:34:45","slug":"google-changes-password-policy-android","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/google-changes-password-policy-android\/","title":{"rendered":"Google is changing its password policy for Android users"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-146848\" src=\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2021\/06\/google_password_security_cjtqkt.jpg\" alt=\"an open cyber lock password\" width=\"700\" height=\"394\" \/><\/p>\n<p>Passwords, as a security login credential, have been falling out fashion recently as we\u2019ve seen a number of key password policies change. We saw Microsoft realize that constantly pushing users to <a href=\"https:\/\/en.softonic.com\/articles\/microsoft-password-expiration\" target=\"_blank\" rel=\"noopener noreferrer\">change their password every few months wasn\u2019t necessarily the most secure way of doing things<\/a>, before then announcing last month that <a href=\"https:\/\/en.softonic.com\/articles\/windows-10-password-free\" target=\"_blank\" rel=\"noopener noreferrer\">Windows 10 users can make their devices password free<\/a>, should they wish.<\/p>\n<p>It now looks like another massive player on the tech scene, <a href=\"https:\/\/security.googleblog.com\/2019\/08\/making-authentication-even-easier-with_12.html\" target=\"_blank\" rel=\"noopener noreferrer\">Google, is about to do something similar that could potentially see over a billion users turn their backs on passwords<\/a>.<\/p>\n<div class=\"sc-card-starred-link\">\r\n  <div class=\"sc-card-starred-link__body\">\r\n    <div class=\"sc-card-starred-link__row clearfix\">\r\n      <div class=\"sc-card-starred-link__col-logo\">\r\n        <img decoding=\"async\" class=\"sc-card-starred-link__img\" src=\"https:\/\/articles-img.sftcdn.net\/image\/upload\/q_auto:eco\/v1559662280\/editorial\/privacy_lock_192.webp\" width=\"100px\" height=\"100px\">\r\n      <\/div>\r\n      <div class=\"sc-card-starred-link__col-title\">\r\n        <p class=\"sc-card-starred-link__title\">Ultimate Online Privacy Guide<\/p>\r\n        <a class=\"sc-card-starred-link__button\" href=\"https:\/\/en.softonic.com\/articles\/online-privacy-guide\" target=\"_blank\" rel=\"noopener noreferrer sponsored\">Read Now \u25ba<\/a>\r\n      <\/div>\r\n    <\/div>\r\n    <a class=\"sc-card-starred-link__link\" href=\"https:\/\/en.softonic.com\/articles\/online-privacy-guide\" target=\"_blank\" rel=\"noopener noreferrer sponsored\"><\/a>\r\n  <\/div>\r\n<\/div>\n<h2>Google is working on new security standards for Android that will enable users to log in to websites using their phone\u2019s fingerprint sensor instead of a password<\/h2>\n<p>As more and more Android devices are being built with fingerprint sensors it makes sense for Google to pivot Android towards using them more often. Passwords have long been the go-to security credential, but this is because we\u2019ve had personal computing devices for decades now while biometric security measures have been reserved for Hollywood depictions of nuclear bunkers or galactic spaceships.<\/p>\n<h3>Why are passwords a problem?<\/h3>\n<p>Passwords have inherent security flaws built into them. The biggest such flaw is human error. We\u2019re prone to choose a simple password that is easy to remember but that, unfortunately, is also easy to crack. Microsoft recently changed this policy but until recently we\u2019ve often had to update our passwords every six months. This then leads many of us to write down our new passwords on post-it notes and stick them somewhere on our desk.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-146851 aligncenter\" src=\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2021\/06\/unsecured_password_fkg5nn.jpg\" width=\"500\" height=\"500\" \/><\/p>\n<p>It isn\u2019t all human error though. Passwords need to be stored on servers, which can then be breached or hacked. We\u2019ve seen a multitude of such breaches in recent years, from <a href=\"https:\/\/en.softonic.com\/articles\/yahoo-announce-that-all-accounts-were-effected-by-2013-security-breach\" target=\"_blank\" rel=\"noopener noreferrer\">the ridiculously scaled Yahoo data breach<\/a> to the recent story about <a href=\"https:\/\/en.softonic.com\/articles\/google-left-passwords-unprotected\" target=\"_blank\" rel=\"noopener noreferrer\">Google leaving certain user passwords unprotected for over 14 years<\/a>.<\/p>\n<div class=\"sc-card-program\">\r\n  <div class=\"sc-card-program__body\">\r\n    <div class=\"sc-card-program__row clearfix\">\r\n      <div class=\"sc-card-program__col-logo\">\r\n        <img decoding=\"async\" class=\"sc-card-program__img\" alt=\"Lastpass\" src=\"https:\/\/images.sftcdn.net\/images\/t_optimized,f_auto\/p\/a3758f98-9b22-11e6-87f8-00163ec9f5fa\/2829086021\/lastpass-logo.png\" width=\"100px\" height=\"100px\">\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-title\">\r\n        <span class=\"sc-card-program__title\">Lastpass<\/span>\r\n        <a class=\"sc-card-program__button sc-card-program-internal\" href=\"https:\/\/LastPass.wo8g.net\/c\/310668\/527626\/8692?subId1=softonic-articles\" target=\"_self\" rel=\"noopener noreferrer\">Download Lastpass<\/a>\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-rating\">\r\n        <svg class=\"rating-score__content\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" version=\"1.1\" x=\"0\" y=\"0\" viewbox=\"0 0 50 50\" enable-background=\"new 0 0 50 50\" xml:space=\"preserve\"><path class=\"rating-score__background rating-score--good\" fill=\"none\" stroke-width=\"6\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><path class=\"rating-score__value rating-score__value--80\" fill=\"none\" stroke-width=\"6\" stroke-dashoffset=\"80\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><text class=\"rating-score__number\" content=\"8\" text-anchor=\"middle\" transform=\"matrix(1 0 0 1 25 31.0837)\" data-auto=\"app-user-score\">8<\/text><\/svg>\r\n      <\/div>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <span class=\"sc-card-program__description\"><\/span>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <img decoding=\"async\" class=\"sc-card-program__bigpic\" src=\"\" onerror=\"this.style.display='none'\">\r\n    <\/div>\r\n    <a class=\"sc-card-program__link track-link sc-card-program-internal\" href=\"https:\/\/LastPass.wo8g.net\/c\/310668\/527626\/8692?subId1=softonic-articles\" target=\"_self\" rel=\"noopener noreferrer\"><\/a>\r\n  <\/div>\r\n<\/div>\n<p>Password managers like the impressive free offering <a href=\"https:\/\/LastPass.wo8g.net\/c\/310668\/527626\/8692?subId1=softonic-articles\" target=\"_blank\" rel=\"noopener noreferrer\">Last Pass<\/a>, offer a neat solution to the password problem. They store your passwords under rigid encryption and on secure servers and then generate incredibly secure passwords for all the different websites you need to log into.<\/p>\n<p>What\u2019s more, even the free version of Last Pass offers fingerprint authentication across your phone\u2019s apps and on websites across both your mobile and on desktop.<\/p>\n<h3>How does the new Google offering all work?<\/h3>\n<p>Google is trying to cut out the middleman on Android devices, however, by enabling fingerprint verification for Android phones running version 7, Nougat, and above. If you have a phone running Android 7 or above, the new fingerprint authentication feature should hit your device sometime in the next few days. This will open up fingerprint authentication across key Google products and sites.<\/p>\n<figure id=\"attachment_146852\" aria-describedby=\"caption-attachment-146852\" style=\"width: 203px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-146852\" src=\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2021\/06\/google_password_security_diagram_jsx9xn.jpg\" alt=\"\" width=\"203\" height=\"320\" \/><figcaption id=\"caption-attachment-146852\" class=\"wp-caption-text\">Image via: <a href=\"https:\/\/security.googleblog.com\/2019\/08\/making-authentication-even-easier-with_12.html\" target=\"_blank\" rel=\"noopener noreferrer\">Google Blog<\/a><\/figcaption><\/figure>\n<p>The new local biometric authentication update follows an announcement Google made at the Mobile World Conference in February. It was then that Google told the world that all Android 7 phones and above are FIDO2 compliant, which means they can securely unlock sites and apps using either hardware security keys or locally stored information like biometrics. This is the same principle that <a href=\"https:\/\/en.softonic.com\/articles\/windows-10-password-free\" target=\"_blank\" rel=\"noopener noreferrer\">makes your four-figure Windows 10 pin more secure than your standard multi-digit, multi-character password<\/a>.<\/p>\n<p>In the <a href=\"https:\/\/security.googleblog.com\/2019\/08\/making-authentication-even-easier-with_12.html\" target=\"_blank\" rel=\"noopener noreferrer\">Google blog post announcing how FIDO2 Android capability works<\/a>, it says, \u201cyour fingerprint is never sent to Google\u2019s servers &#8211; it is securely stored on your device, and only a cryptographic proof that you\u2019ve correctly scanned it is sent to Google\u2019s servers.\u201d This basic, yet much more secure, locally stored security protocol forms a key tenet of the <a href=\"https:\/\/fidoalliance.org\/wp-content\/uploads\/2014\/12\/FIDO_Alliance_Whitepaper_Privacy_Principles.pdf\">FIDO2 design<\/a>.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-146854 aligncenter\" src=\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2021\/05\/google_password_security_fingerprint_jt8y3s.jpg\" width=\"350\" height=\"552\" \/><\/p>\n<p>When the new feature lands on your Android device, you\u2019ll be able to test it on Google Chrome by going to <a href=\"https:\/\/passwords.google.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">Google\u2019s password manager site<\/a>. There, you\u2019ll find a list of all your web services and security credentials. You\u2019ll then be able to verify your identity using your screen lock security ID, which should be your fingerprint authentication. Go check it out and let us know what you think.<\/p>\n<div class=\"sc-related-articles-white\">\r\n<p class=\"sc-related-articles-white__title\">More Softonic Articles<\/p>\r\n  <div class=\"sc-related-articles-white__row\">\r\n    <a title=\"5 tips to prevent security issues with your phone \u25ba\" href=\"https:\/\/en.softonic.com\/articles\/5-tips-to-prevent-security-issues-with-your-phone\">\r\n    <div class=\"sc-related-articles-white__article\">\r\n      <div class=\"sc-related-articles-white__image\">\r\n        <div style=\"background-image:url(https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2018\/03\/Screen-Shot-2018-03-19-at-12.34.02.png)\"><\/div>\r\n      <\/div>\r\n      <div class=\"sc-related-articles-white__text\">\r\n        <p>5 tips to prevent security issues with your phone \u25ba<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <\/a>\r\n    <a title=\"8 tricks to strengthen your WhatsApp security \u25ba\" href=\"https:\/\/en.softonic.com\/articles\/8-tricks-to-strengthen-your-whatsapp-security\">\r\n    <div class=\"sc-related-articles-white__article\">\r\n      <div class=\"sc-related-articles-white__image\">\r\n        <div style=\"background-image:url(https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2017\/11\/whatsapp-web-screenshot-1024x576-1024x576.png)\"><\/div>\r\n      <\/div>\r\n      <div class=\"sc-related-articles-white__text\">\r\n        <p>8 tricks to strengthen your WhatsApp security \u25ba<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <\/a>\r\n  <\/div>\r\n  <div class=\"sc-related-articles-white__row\">\r\n    <a title=\"7 mistakes that put your internet security at risk \u25ba\" href=\"https:\/\/en.softonic.com\/articles\/mistakes-internet-security-risk\">\r\n    <div class=\"sc-related-articles-white__article\">\r\n      <div class=\"sc-related-articles-white__image\">\r\n        <div style=\"background-image:url(https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2017\/06\/5mistakesHeader-1024x576.jpg)\"><\/div>\r\n      <\/div>\r\n      <div class=\"sc-related-articles-white__text\">\r\n        <p>7 mistakes that put your internet security at risk \u25ba<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <\/a>\r\n    <a title=\"8 tricks to boost your security on Google Chrome \u25ba\" href=\"https:\/\/en.softonic.com\/articles\/8-tricks-to-boost-your-security-on-google-chrome\">\r\n    <div class=\"sc-related-articles-white__article\">\r\n      <div class=\"sc-related-articles-white__image\">\r\n        <div style=\"background-image:url(https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2017\/11\/crome-security-1024x576-1024x576.jpg)\"><\/div>\r\n      <\/div>\r\n      <div class=\"sc-related-articles-white__text\">\r\n        <p>8 tricks to boost your security on Google Chrome \u25ba<\/p>\r\n      <\/div>\r\n    <\/div>\r\n    <\/a>\r\n  <\/div>\r\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Google is working on new security standards for Android that will enable users to log in to websites using their phone\u2019s fingerprint sensor instead of a password<\/p>\n","protected":false},"author":9073,"featured_media":146847,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":0},"categories":[1015],"tags":[1082,2340,1068,1027],"usertag":[839],"vertical":[],"content-category":[],"class_list":["post-146763","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-android","tag-app-subdomain-redirectiongoogle","tag-google","tag-security","usertag-vpn"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/146763","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/users\/9073"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/comments?post=146763"}],"version-history":[{"count":1,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/146763\/revisions"}],"predecessor-version":[{"id":325574,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/146763\/revisions\/325574"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media\/146847"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media?parent=146763"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/categories?post=146763"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/tags?post=146763"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/usertag?post=146763"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/vertical?post=146763"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/content-category?post=146763"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}