Web2’s Big Players Want to Eliminate Passwords

Both Microsoft and Google have a desire to kill passwords.

In the context of Web2, billions of users around the world use passwords as the basic way to log in to various websites or apps on different devices every day. Although this login method has undergone many developments and is quite mature, such as various login restrictions and two-step verification, poor password management is still common.

Obviously, this login method still has many obvious flaws. First, passwords are inherently insecure. They can be stolen, guessed, or cracked by brute force. Especially with the improvement of computing power, the difficulty of cracking traditional password technology is constantly decreasing. Secondly, everyone is using more than ten or even nearly a hundred passwords. How to remember so many username and password combinations and change them regularly is difficult to achieve without the help of third-party password management tools. In this case, most users will be lazy and use the same password for multiple applications. In this context, Web2 giants including Microsoft, Apple, and Google are actively developing a more advanced password-free login technology and standards to achieve higher security and protection.

Recently, the Google Passkey service function was released, which is an important sign of replacing traditional password verification technology.

Google Passkey is an authentication technology based on the FIDO2 specification, and it works very simply. Users only need to use their Google account and a hardware key that supports the FIDO2 specification to complete the authentication. This authentication method is more secure than traditional usernames and passwords because it uses public key cryptography, and the user's sensitive information is not transmitted to the server. In addition, Google Passkey is also more convenient than traditional two-factor authentication because users only need one device to complete the authentication.

Initially, Google Passkey was launched as a variant of the hardware key, the Titan Security Key. Over time, Google expanded this technology to more application scenarios and named it Google Passkey. Today, Google Passkey has been supported by more and more applications and websites, such as Dropbox, GitHub, Twitter, etc.

At present, it seems that Google Passkey has broad room for development. First of all, it is expected to become one of the mainstream methods of identity authentication in the future. As more and more websites and applications support Google Passkey, users can use the same authentication method to log in to different applications and websites. Secondly, Google Passkey will also be used in combination with other technologies, such as biometrics and artificial intelligence, to further improve the security and reliability of identity authentication.

In the Web3 world, passwords should be eliminated

As blockchain technology continues to innovate and develop, more and more people are beginning to use cryptocurrencies. In order to manage digital assets, users need to use blockchain wallets. Different types of blockchain wallets have their own advantages and disadvantages, and they differ in security, convenience, and functionality.

At present, we can see that more and more investors, entrepreneurs and developers are shifting from Web2 to Web3, which shows that the development of blockchain technology has entered a new stage. At the same time, we can also see that DeFi is decreasing, while games, social media, NFT and music applications are rising. The application scenarios of blockchain technology are constantly expanding and deepening, and blockchain wallets will become an important user entrance and bridge.

Therefore, as one of the important factors driving the further development of blockchain technology, blockchain wallets are also facing many new requirements and challenges. The most important issue is how to balance security and convenience, that is, to ensure that users have complete control over their assets while lowering the threshold for use and optimizing the experience. In addition, cross-chain support and so on need to be considered.

For some deep players, the current blockchain wallet products are safe, but they have problems such as a steep learning curve, so they are not convenient to use. For most ordinary users, the existing wallet products are neither safe nor convenient, and problems such as losing private keys cannot be solved.

Nervos Solution JoyID

JoyID is an identity authentication and wallet management solution based on Nervos CKB. It consists of two main components: on-chain contracts and front-end products. JoyID's business processes include adding and deleting devices/public keys, authentication, and social recovery.

JoyID Wallet has many features, some of the main features include:

1. No password, no mnemonics: JoyID wallet uses fingerprint recognition to create and confirm transactions. There is no need to remember passwords or mnemonics, making the user experience smoother and more convenient.

2. No need to rely on any Web2 account: JoyID wallet does not require users to provide any Web2 account information, such as mobile phone number or email address, to ensure user privacy and security.

3. Decentralization and true non-custodial: The JoyID wallet adopts a decentralized design. The user's private key is stored in the device's security chip. JoyID can only read the public key and request a signature to ensure the security of the user's assets.

4. No installation required: JoyID wallet does not require downloading applications. You can use it by simply opening the web page through a browser, which is also convenient for integration with other applications.

5. Multi-device login: JoyID wallet supports multi-device login. Users can enter the address on other devices and start authorized login. Subsequent versions will be optimized to direct scan code login.

6. Multiple recovery options: JoyID wallet supports multiple recovery options, including mnemonics, social recovery and Passkey, etc. Users can choose the appropriate recovery option according to their needs.

JoyID Wallet supports a wide range of devices and can be used in browsers of Windows 10/11, MacOS (needs to support TouchID), Android 7.0+ (needs to have GMS), iOS 14.5+, and supports login on all platforms. In Linux systems, users can use Yubikey to generate public and private keys, and subsequent versions will also support Linux systems.