Connect with us

Technologies

New iOS Login Tech Makes It Super Hard to Hack Your iCloud Account

Hardware security keys are the most secure way to lock down your online accounts. Just don’t lose the keys.

Apple now lets you protect your Apple ID and iCloud account with hardware security keys, a significant upgrade for those who want maximum protection from hackers, identity thieves, or snoops.

Hardware security keys are small physical devices that communicate with USB or Lightning ports or with NFC wireless data connections when you’re logging on to a device or in to an account. Because you must have keys in your possession to use them, they’re effective at thwarting hackers trying to reach your account remotely. And they won’t work on fake login sites, so they can thwart phishing attacks that try to fool you into typing your password onto a counterfeit website.

Support for the keys arrived Monday with iOS 16.3 and MacOS 13.2, and on Tuesday, Apple published details on how to use security keys with iPhones, iPads and Macs. The company requires you to set up at least two keys.

Apple has been working to tighten security in recent months, stung by iPhone breaches involving NSO Group’s Pegasus spyware. Apple’s Advanced Data Protection option arrived in December, giving a stronger encryption option to data stored and synced with iCloud. And in September, Apple added an iPhone Lockdown Mode that includes new guardrails on how your phone works to thwart outside attacks.

A big caveat, though: Although hardware security keys and the Advanced Data Protection program lock down your account better, they also mean Apple can’t help you recover access.

«This feature is designed for users who, often due to their public profile, face concerted threats to their online accounts, such as celebrities, journalists, and members of government,» Apple said in a statement. «This takes our two-factor authentication even further, preventing even an advanced attacker from obtaining a user’s second factor in a phishing scam.»

Industry tightens login security

The technology is part of an industrywide tightening of authentication procedures. Thousands of data breaches have shown the weaknesses of traditional passwords, and hackers now can thwart common two-factor authentication technologies like security codes sent by text message. Hardware security keys and another approach called passkeys offer peace of mind even when it comes to serious attacks like hackers gaining access to LastPass customers’ password manager files.

Hardware security keys have been around for years, but the Fast Identity Online, or FIDO, group has helped standardize the technology and integrate its use with websites and apps. One big advantage on the web is they’re linked to specific websites, for example Facebook or Twitter, so they thwart phishing attacks that try to get you to log in to fake websites. They’re the foundation for Google’s Advanced Protection Program, too, for those who want maximum security.

You need to pick the right hardware security keys for your devices. To communicate with relatively new models of both Macs and iPhones, a key that supports USB-C and NFC is a good option. Apple requires you to have two keys, but it isn’t a bad idea to have more in case you lose them. A single key can be used to authenticate to many different devices and services, like your Apple, Google and Microsoft accounts.

Yubico, the top maker of hardware security keys, announced on Tuesday two new FIDO-certified YubiKey models in its Security Key Series suited for consumers. They both support NFC, but the $29 model has a USB-C connector and the $25 model has an older style USB-A connector.

Google, Microsoft, Apple and other allies are also working to support a different FIDO authentication technology called passkeys. Passkeys are designed to replace passwords altogether, and they don’t require hardware security keys.

Technologies

Microsoft Is Eliminating Passwords in August: Here’s What You Need to Do to Prepare

Microsoft Authenticator has already stopped autofilling passwords, but the biggest change comes next month.

In June, Microsoft Authenticator stopped letting users create new passwords. In July, it turned off the autofill password function. And in August, the login app will stop supporting passwords entirely, moving to more secure passkeys, such as a PIN, fingerprint or facial recognition.

Attila Tomaschek, CNET’s software senior writer and digital security expert, says that passkeys are a safer alternative to the risky password habits practiced by 49% of US adults, according to a recent survey by CNET.

«Passwords can be cracked, whereas passkeys need both the public and the locally stored private key to authenticate users, which can help mitigate risks like falling victim to phishing and brute-force or credential-stuffing attacks,» Tomaschek said.

Using the same password for several accounts or adding personal hints can be a convenient way to remember your login. But that puts you at a big risk for scammers, identity theft and fraud. Here’s more on Microsoft’s plan for eliminating passwords and how to make the switch to passkeys before August.

When will Microsoft Authenticator stop supporting passwords?

Microsoft Authenticator houses your passwords and lets you sign into all your Microsoft accounts using a PIN, facial recognition like Windows Hello, or other biometric data like a fingerprint. Authenticator can be used in other ways, such as verifying you’re logging in if you forgot your password, or using two-factor authentication as an extra layer of security for your accounts. In June, the company stopped letting users add passwords to Authenticator, but here’s a timeline of other changes you can expect from Microsoft.

  • July 2025: You won’t be able to use the autofill password function.
  • August 2025: You’ll no longer be able to use saved passwords.

If you still want to use passwords instead of passkeys, you can store them in Microsoft Edge. However, CNET experts recommend adopting passkeys during this transition. «Passkeys use public key cryptography to authenticate users, rather than relying on users themselves creating their own (often weak or reused) passwords to access their online accounts,» Tomaschek said.

Why are passkeys a better alternative to passwords?

So what exactly is a passkey? It’s a credential created by the Fast Identity Online Alliance that uses biometric data or a PIN to verify your identity and access your account. Think about using your fingerprint or Face ID to log into your account. That’s generally safer than using a password that is easy to guess or susceptible to a phishing attack.

Passkeys aren’t stored on servers like passwords. Instead, they’re stored only on your personal device. More conveniently, this takes the guesswork out of remembering your passwords and the need for a password manager.

How to set up a passkey in Microsoft Authenticator

Microsoft said in a May 1 blog post that it will automatically detect the best passkey to set up and make that your default sign-in option. «If you have a password and ‘one-time code’ set up on your account, we’ll prompt you to sign in with your one-time code instead of your password. After you’re signed in, you’ll be prompted to enroll a passkey. Then the next time you sign in, you’ll be prompted to sign in with your passkey,» according to the blog post.

To set up a new passkey, open your Authenticator app on your phone. Tap on your account and select «Set up a passkey.» You’ll be prompted to log in with your existing credentials. After you’re logged in, you can set up the passkey.

Continue Reading

Technologies

The AI Chatbots We Use Most, and How We Use Them

91% of AI users have a default artificial intelligence assistant they turn to for their AI tasks, a Menlo Ventures report has found.

If you have a particular artificial intelligence tool that you tend to try first every time you’re in need of an AI assist, you’re not alone. According to a new survey, 91% of people who use AI have a favorite chatbot they try first, whether it’s ChatGPT, Gemini, Alexa or something else.

A Menlo Ventures survey of 5,000 adults found that this «default tool dynamic» means most people using AI have chosen a general AI tool they’ll try first for every job, even if it’s not necessarily the best tool for the job.

In the report, ChatGPT is the AI assistant that tops default tools, with 28% of respondents choosing it first. It’s followed by Google’s Gemini at 23%, Meta AI and Amazon’s Alexa, both at 18% and Apple’s Siri at 16%. Other tools including Claude, Grok and Perplexity collectively make up another 33%.

Some of the most common ways people are using these AI tools include composing emails and other writing support, researching topics of interest and managing to-do lists, according to Menlo Ventures.

Some of that, Menlo Ventures says, is «first-mover advantage,» with tools like ChatGPT having built up a following by being the first to offer some chatbot and image-generation features. But, the company warns, «that position is not guaranteed,» with challengers moving fast.

«The consumer market for [large language models] is still nascent and far from saturated,» the report says, «leaving ample room for product innovation to shift market share over time.»

Overall, 61% of Americans have used AI in the last six months and nearly 1 in 5, 19%, rely on it daily, the report says.

Continue Reading

Technologies

This Early Prime Day Deal Lets You Grab AirPods 4 At Their Lowest Price Yet

Apple’s AirPods 4 have dropped to their lowest price of 2025 — but this early Prime Day deal won’t last long.

Prime Day is still a few sunsets away, but Amazon isn’t waiting around. The retailer has already started slashing prices across tons of popular products, including the much-loved AirPods 4 (ANC).

For a limited time, you can snag these for 2025’s best price of just $149. This saves you $30, and you don’t even have to enter any codes or clip any coupons. The catch? We can’t promise that this deal will stick around for much longer.

This is the latest generation of Apple’s earbuds. The Apple AirPods 4 have the same H2 chip found in the AirPods Pro 2, so you can expect great sound quality. They also rock a more compact design with this new generation and offer excellent voice-calling performance. Plus, Spatial Audio support adds a touch of personalization.

Note that this deal is for the ANC (active noise cancellation) model of these earbuds. It comes with a wireless charging case and a speaker that can help you find them using Apple’s Find My tracking service.  

«With a slightly smaller design, improved sound and Apple’s powerful H2 chip features, the Apple AirPods 4 are a worthy upgrade,» said CNET audio expert David Carnoy in his AirPods 4 review. «But what really makes them special is the noise canceling in the step-up ANC model.»

Hey, did you know? CNET Deals texts are free, easy and save you money.

What’s the competition like? You can find out by reading through the best early Prime Day deals on headphones and speakers, where we’ve rounded up all the latest and greatest prices from the likes of Apple, Sony, Beats and many more big names. Just be sure to get your orders in before the deals expire.

Why this deal matters

Apple products rarely go on sale, and when they do, the stock tends to run out before the deal window closes. Combine that with AirPods 4 being Apple’s latest AirPods and this discount being the year’s all-time low price — you have a nice offer in your hands.

Continue Reading

Trending

Copyright © Verum World Media