Categories
Mobile Syrup

Passkeys are coming to Dashlane with Android 14

With the coming of Android 14, more apps are set to replace regular passwords with passkeys, and one of them is Dashlane.

Passkeys allow users to create online accounts and sign in to them without entering a password. According to 1Password, if they are implemented correctly, you won’t have to type anything out or require a two-factor authentication code.

In a blog post today, Dashlane said that it would add support for passkeys in Android 14, as the new version of Android allows passkeys for third-party apps. Therefore, Dashlane won’t be the only app that’ll be picking up passkeys when Android 14 launches later this year. 1Password is another app that’s announced the inclusion of passkeys.

In a tweet, Dashlane showed off what passkeys would look like on its app when Android 14 launches.

Passkeys will launch in Dashlane with the final release of Android 14, which is expected to roll out in August.

Source: Dashlane

Categories
Mobile Syrup

Security experts say LastPass mislead customers in August data breach updates

Security experts are calling LastPass out on its “misleading” December security breach update.

The breach originates from an incident in August that led to a subsequent breach in November, where cyber criminals gained access to user password vaults. LastPass posted two updates since August, with the latter one coming earlier this month. The company said there was no cause for concern as passwords remain encrypted. While hackers could use brute force to access master passwords, LastPass said it “would take millions of years to guess” if the company’s best practices for passwords were followed.

Jeffrey Goldberg, the Principal Security Architect at 1Password, said the “claim is highly misleading.” The statement assumes users randomly generated their own master passwords, which Goldberg said people aren’t very good at doing.

“Unless your password was created by a good password generator, it is trackable,” Goldberg wrote in a blog post. The best practices LastPass mentions don’t include anything about a password generator, which Goldberg insinuates is the way to create uncrackable passwords.

It also isn’t expensive to guess passwords, Goldberg wrote, with 10 billion guesses equaling $100 USD (roughly $135 Canadian).

“Given that the attacker is starting with the most likely human-created passwords first, that $100 worth of effort is likely to get results unless the password was machine generated.”

LastPass’ transparency claims have also been called out. Security researcher Wladimir Palant called out the company’s “commitment to transparency.” LastPass stated its updates were to remain transparent to its customers. However,  Palant wrote in a blog post that LastPass has to share data breaches immediately under U.S. law.

He further accused the company of portraying the August breach and November incident as two separate events. In reality, LastPass could not contain the August breach. “Because of that failure, people’s data is now gone,” Palant wrote.

Source: 1Password, Wladimir Palant Via: The Verge 

Categories
Mobile Syrup

Toronto-based 1Password adds new secure file sharing feature

Toronto-based AgileBits rolled out new functionality to its 1Password password manager that makes it easier for users to securely share documents.

1Password detailed the new feature in a blog post (via The Verge). It’s effectively an expansion of the secure password-sharing feature released last fall. 1Password users can share documents or files stored in the app to other 1Password users, or people who don’t use 1Password.

To share a file, 1Password users must create a secure link to it. The Verge describes it as similar to sharing a Google Drive file, but with more control over who can access the file. 1Password lets users restrict file access through expiry dates, or make people verify their email address with a one-time code to gain access.

For recipients, the process is as simple as clicking a link. It opens a ‘share.1password.com’ page where recipients can access the file or information shared with them. 1Password even shared an example file so people can see how it looks.

Overall, it seems like a pretty handy addition to 1Password. It should be a lot easier to share sensitive documents and files with friends and family. Or, just a great way to securely share your Netflix password with someone (despite how much the company wishes you’d stop sharing your password).

You can learn more about 1Password’s file-sharing features here.

Images credit: 1Password

Source: 1Password Via: The Verge

Categories
Mobile Syrup

Millions in recent funding make 1Password one of Canada’s most valuable tech companies

Toronto-based cyber security company 1Password has grown its net worth into billions.

A statement from the company shows it raised $620 million USD (roughly $774 million CAD) in recent rounds of funding. This is the largest amount raised by a Canadian company.

1Password is now valued at $6.8 billion USD (roughly $8.4 billion CAD).

The company creates technology that helps businesses keep their information safe and focuses its products around human actions. It allows companies to keep track of what apps employees are downloading without permission, breaching possible security guidelines.

“Our mission has always been to ease the tension between security and convenience, and the opportunity to deliver on this has never been bigger for 1Password,” Jeff Shiner, CEO of 1Password, said in a statement.

Investments came from a barrage of people, including celebrities and CEOs. Executives at LinkedIn, General Motors, and Snowflake Computing are also investing.

Over the past 24 months, the company’s customer base grew past 100,000, leading to the hiring of 570 employees.

The company will use the additional funds to develop security solutions that will help companies protect private data and other information. This will focus on improving the company’s existing security measures and creating better habits for employees.

“That way, we can tackle the biggest security threats facing the modern workforce and deliver on the promise of providing a safer life online for families and businesses around the world,” Shiner said.

Image credit: ShutterStock

Source: 1Password