Apple hopes to bolster password security with open source project

The tech giant wants developers of password managers to collaborate for better user experience and security

The post Apple hopes to bolster password security with open source project appeared first on WeLiveSecurity

/by

Week in security with Tony Anscombe

A deep-clean of your Facebook history – Google’s Advanced Protection-Nest integration – Talking to your kids before they join social media

The post Week in security with Tony Anscombe appeared first on WeLiveSecurity

/by

How secure is your phone’s lock screen?

From the humble passcode to biometric authentication, there are quite a few options to lock your Android phone. But which of them are more secure than the others?

The post How secure is your phone’s lock screen? appeared first on WeLiveSecurity

/by

Mozilla fixes high‑risk Firefox flaws, bug in DoH feature

The browser maker rolls out updates on back-to-back days, including a patch to avoid unintentionally overloading DNS providers

The post Mozilla fixes high‑risk Firefox flaws, bug in DoH feature appeared first on WeLiveSecurity

/by

Making the Advanced Protection Program and Titan Security Keys easier to use on Apple iOS devices

Posted by Christiaan Brand, Product Manager, Google Cloud 

Starting today, we’re rolling out a change that enables native support for the W3C WebAuthn implementation for Google Accounts on Apple devices running iOS 13.3 and above. This capability, available for both personal and work Google Accounts, simplifies your security key experience on compatible iOS devices and allows you to use more types of security keys for your Google Account and the Advanced Protection Program.

Using an NFC security key on iPhone

More security key choices for users

  • Both the USB-A and Bluetooth Titan Security Keys have NFC functionality built-in. This allows you to tap your key to the back of your iPhone when prompted at sign-in.
  • You can use a Lightning security key like the YubiKey 5Ci or any USB security key if you have an Apple Lightning to USB Camera Adapter.
  • You can plug a USB-C security key in directly to an iOS device that has a USB-C port (such as an iPad Pro).
  • We suggest installing the Smart Lock app in order to use Bluetooth security keys and your phone’s built-in security key, which allows you to use your iPhone as an additional security key for your Google Account.

In order to add your Google Account to your iOS device, navigate to “Settings > Passwords & Accounts” on your iOS device or install the Google app and sign in.

Account security best practices
We highly recommend users at a higher risk of targeted attacks to get security keys (such as Titan Security Key or your Android or iOS phone) and enroll into the Advanced Protection Program. If you’re working for political committees in the United States, you may be eligible to request free Titan Security Keys through the Defending Digital Campaigns to get help enrolling into Advanced Protection.
You can also use security keys for any site where FIDO security keys are supported for 2FA, including your personal or work Google Account, 1Password, Bitbucket, Bitfinex, Coinbase, Dropbox, Facebook, GitHub, Salesforce, Stripe, Twitter, and more.

/by

Facebook now lets you delete old posts in bulk

Dealing with skeletons lurking in your Facebook closet has never been easier

The post Facebook now lets you delete old posts in bulk appeared first on WeLiveSecurity

/by

Google adds Nest devices to Advanced Protection Program

You can now shore up your smart home security by leveraging Google’s top security offering

The post Google adds Nest devices to Advanced Protection Program appeared first on WeLiveSecurity

/by

The Advanced Protection Program comes to Google Nest

Posted by Shuvo Chatterjee, Product Manager, Advanced Protection Program

The Advanced Protection Program is our strongest level of Google Account security for people at high risk of targeted online attacks, such as journalists, activists, business leaders, and people working on elections. Anyone can sign up to automatically receive extra safeguards against phishing, malware, and fraudulent access to their data.

Since we launched, one of our goals has been to bring Advanced Protection’s features to other Google products. Over the years, we’ve incorporated many of them into GSuite, Google Cloud Platform, Chrome, and most recently, Android. We want as many users as possible to benefit from the additional levels of security that the Program provides.

Today we’re announcing one of the top requests we’ve received: to bring the Advanced Protection Program to Nest.  Now people can seamlessly use their Google Accounts with both Advanced Protection and Google Nest devices — previously, a user could use their Google Account on only one of these at a time.

Feeling safe at home has never been more important and Nest has announced a variety of new security features this year, including using reCAPTCHA Enterprise, to significantly lower the likelihood of automated attacks. Today’s improvement adds yet another layer of protection for people with Nest devices.

For more information about using Advanced Protection with Google Nest devices, check out this article in our help center.

/by

Bug in ‘Sign in with Apple’ could have allowed account hijacking

The tech giant rewards the bug bounty hunter who found the severe flaw in its login mechanism with US$100,000

The post Bug in ‘Sign in with Apple’ could have allowed account hijacking appeared first on WeLiveSecurity

/by

3 things to discuss with your kids before they join social media

What are some of the key things your children should know about before they make their first foray into social media?

The post 3 things to discuss with your kids before they join social media appeared first on WeLiveSecurity

/by