Technologies

Microsoft Will Delete Your Passwords This Friday. What to Do Now

Passwords won’t work in the Authenticator app, but there are some alternatives worth exploring before it’s too late.

We’re only days away from the Microsoft Authenticator app no longer managing passwords.

As of this Friday, you won’t be able to save or manage passwords, use two-factor authentication or auto-fill. And it won’t be your go-to password manager anymore, either.

Earlier this summer, Microsoft announced it was moving from passwords to passkeys. So instead of creating a password with a mix of letters, symbols and numbers, you’ll use PINs, fingerprint scans, facial recognition or a pattern on your device’s lock screen to log in to your accounts.

Passkeys are a safer alternative to the risky password habits we use, according to Attila Tomaschek, a CNET software senior writer and digital security expert. CNET’s password survey found that 49% of US adults have bad password habits. And using the same password for several accounts or one that’s easy to guess can put you at risk of hackers stealing your data.

Yet, the switch to a new login process is coming up quickly. So it’s time to figure out how passkeys will work with Microsoft and to pick a new password manager. Here’s what you need to know to get started.

Microsoft Authenticator will stop supporting passwords on Aug. 1

Microsoft Authenticator houses your passwords and lets you sign into all your Microsoft accounts using a PIN, facial recognition like Windows Hello or other biometric data like a fingerprint. Authenticator can be used in other ways, such as verifying you’re logging in if you forgot your password, or using two-factor authentication as an extra layer of security for your accounts. In June, the company stopped letting users add passwords to Authenticator.

As of this month, you won’t be able to use the autofill password function. And starting Aug. 1, you’ll no longer be able to use saved passwords.

If you still want to use passwords instead of passkeys, you can store them in Microsoft Edge. However, CNET experts recommend adopting passkeys during this transition. «Passkeys use public key cryptography to authenticate users, rather than relying on users themselves creating their own (often weak or reused) passwords to access their online accounts,» Tomaschek said.

Why passkeys are a better alternative to passwords

So what exactly is a passkey? It’s a credential created by the Fast Identity Online Alliance that uses biometric data or a PIN to verify your identity and access your account. Think about using your fingerprint or Face ID to log into your account. That’s generally safer than using a password that is easy to guess or susceptible to a phishing attack.

«Passwords can be cracked, whereas passkeys need both the public and the locally stored private key to authenticate users, which can help mitigate risks like falling victim to phishing and brute-force or credential-stuffing attacks,» said Tomaschek.

Passkeys aren’t stored on servers like passwords. Instead, they’re stored only on your personal device. More conveniently, this takes the guesswork out of remembering your passwords and the need for a password manager.

How to set up a passkey in Microsoft Authenticator

Microsoft said in a May 1 blog post that it will automatically detect the best passkey to set up and make that your default sign-in option. «If you have a password and ‘one-time code’ set up on your account, we’ll prompt you to sign in with your one-time code instead of your password. After you’re signed in, you’ll be prompted to enroll a passkey. Then the next time you sign in, you’ll be prompted to sign in with your passkey,» according to the blog post.

To set up a new passkey, open your Authenticator app on your phone. Tap on your account and select «Set up a passkey.» You’ll be prompted to log in with your existing credentials. After you’re logged in, you can set up the passkey.

Other password manager alternatives

Since Microsoft will get rid of all of your passwords in two weeks, you’ll need a new place to store your passwords safely. Tomaschek has a few of the best password manager recommendations after testing and reviewing several.

The top recommendation is Bitwarden for its transparency. It’s open-source and audited annually. From a price perspective, the free plan lets you store infinite passwords across unlimited devices. The free plan also includes features most password managers would charge for, including password sharing and a username and password generator.

Bitwarden’s upgraded plans have other upgraded features that could be worth the cost, too.

Personally, Tomaschek has been using 1Password for a while, and he likes the interface and family plan. Even though it’s second on the list, Tomaschek says it’s just as good as Bitwarden.

Technologies

How to Track Your Sun Exposure With This New App

Now in beta, the Sun Day app prompts you on how to prep for being out and about for your specific skin type and location.

Facing down a heat wave this summer? There’s a new beta app for iPhones from the founder of Twitter, Jack Dorsey, that helps you track your exposure to the sun. The Sun Day app is free to testers and contains information like sunrise, sunset and UV index in order to assess your potential burn-limit time and, as the app description says, «track your Vitamin D from the sun.»

Dorsey is currently testing UI updates and a solar noon notification, according to the app notes. In the app, you can describe the type of clothing you’re wearing, such as shorts and T-shirts or swimwear, and your Fitzpatrick skin type, which classifies how quickly you’ll burn.

The iOS app asks permission to connect to some Apple Health data when the app is installed.

Dorsey also recently released Bitchat, a private messaging client that uses Bluetooth as its communication platform. Although it’s meant to be a secure, private app, some users have flagged Bitchat for potential security flaws that are still being tested.

How to test the Sun Day app

If you’ve got an iOS device, download the Sun Day TestFlight app from the App Store and then follow the link to the app for Sun Day to join the beta test.

The effectiveness of an app such as Sun Day depends on giving it accurate information about your skin type and clothing, and while vitamin D levels are one way to gauge UV exposure, it’s not foolproof given that some people also take vitamin D supplements.

«Jack Dorsey’s new app Sun Day is exciting, not to detect vitamin D levels but really to help us understand our UV index which is so important in sun safety,» said Tanya Kormeili, an LA-based dermatologist. «The app does have an interesting promise as far as I am concerned, in that using the UV index can show you the risk for the level of UV exposure.»

The risks of too much sun exposure include sunburns, aging skin and skin cancer. Tracking UV levels is one way to help mitigate those risks.

People tend to think about sun exposure and protections like sunscreen most during the summer, when the sun is strongest and the days are long, and when you’re heading to the beach or out gardening, golfing or otherwise getting in quality sun time. But there is always a risk of sun damage to your skin while you’re outside — year round.

«Sometimes it is hard for patients to be convinced that there can be an excessive UV risk on a cloudy day,» Kormeili says. «The app would provide an objective measure of that UV index and guide you in safer sun practices.»

The dermatologist suggests that Dorsey putting the app out for public consumption without medical experts endorsing it might be a missed opportunity. «I am surprised that they have not involved actual dermatologists in pointing out the true value and limitations of this app,» she said.

Technologies

YouTube’s Age-Estimation Tech Will Spot Kids Pretending to Be Adults. Here’s How It Works

The streaming service will use various methods to make sure kids aren’t watching age-restricted content.

If kids are lying about their age, YouTube will know about it. Or at least will try its best to find out. The streaming service announced Tuesday it’s rolling out age-estimation technology that will use various data to determine if someone is under the age of 18, and then use that signal «to deliver our age-appropriate product experiences and protections.»

Basically — assuming it works as it should — kids will not be able to access what YouTube deems as age-restricted content.

Google, YouTube’s parent company, announced in February that it would begin deploying this type of technology, which relies on AI, to determine users’ ages.

YouTube said it will test the machine-learning tech on a small set of users in the US to estimate their age. Some of the signals it will look at include «the types of videos a user is searching for, the categories of videos they have watched or the longevity of the account.» After ensuring the age verification is working as intended, YouTube will then roll it out more widely.

Donna Rice Hughes, president and CEO of children’s online safety organization Enough is Enough, welcomed YouTube’s move toward age verification.

«It’s always encouraging to me as a veteran working in the internet safety space for over three decades to see big tech companies being proactive to better protect youth online,» Hughes told CNET. «Since the advent of social media, which began with age limits of 18 years and older then reduced to 13-plus with absolutely no age verification technologies in place, kids have learned to lie about their age to get on these platforms, including YouTube.»

Hughes said YouTube can take it a step further: «I also encourage YouTube to turn on safety defaults to block sexually explicit videos and advertising and other harmful content for all users under 18.»

YouTube’s age-verification move is another step in the growing age-verification push that is being hastened by the US and other governments trying to prevent children from accessing content deemed harmful, unhealthy and not appropriate for their age.

What happens when YouTube decides someone is under 18?

If its age-estimation system decides someone is under 18, YouTube will then:

Disable personalized advertising.
Turn on digital wellbeing tools.
Add safeguards to recommendations, including limiting repetitive views of some content.

People who are actually adults but who have been wrongly identified as children will be able to verify that they are 18 or older by using a credit card or a government ID.

Hughes of Enough is Enough said that strong measures are needed to protect kids when it comes to their online use of YouTube videos and more.

«At EIE, we have encouraged turning on safety defaults — including filtering, monitoring and time-limiting controls — on all internet-enabled devices and platforms,» Hughes told CNET. «This simple step by big tech companies would greatly empower parents, who now must do this themselves on every device and every social media platform, which is overwhelming.»

Technologies

Today’s NYT Connections: Sports Edition Hints and Answers for July 31, #311

Here are hints and the answers for the NYT Connections: Sports Edition puzzle for July 31, No. 311.

Looking for the most recent regular Connections answers? Click here for today’s Connections hints, as well as our daily answers and hints for The New York Times Mini Crossword, Wordle and Strands puzzles.

Today’s Connections: Sports Edition is heavy on NFL clues, so football fans should do well. The purple category felt like an easy one for me today and it has nothing to do with the NFL. Keeping reading for hints and the answers.

Connections: Sports Edition is out of beta now, making its debut on Super Bowl Sunday, Feb. 9. That’s a sign that the game has earned enough loyal players that The Athletic, the subscription-based sports journalism site owned by the Times, will continue to publish it. It doesn’t show up in the NYT Games app but now appears in The Athletic’s own app. Or you can continue to play it free online.

Read more: NYT Connections: Sports Edition Puzzle Comes Out of Beta

Hints for today’s Connections: Sports Edition groups

Here are four hints for the groupings in today’s Connections: Sports Edition puzzle, ranked from the easiest yellow group to the tough (and sometimes bizarre) purple group.

Yellow group hint: Starts with a break.

Green group hint: Part of one of two conferences.

Blue group hint: Special Philly.

Purple group hint: For the court.