One of the best password managers has announced a new feature that allows its users to log into their vaults with a master password.
Passwordless login will let users secure their Dashlane accounts with whatever they use to lock their smart device, such as their PIN or biometric data, which usually means your fingerprint or face.
The platform is the first to accommodate passwords, a new password-less technology backed by major tech companies like Apple, Google, and Microsoft, to name a few. Likewise, Dashlane is now expanding its use of passwordless technology to protect users’ own vaults.
not quite password
Credential security is more important than ever as the number of digital accounts we hold today continues to grow rapidly. However, this also means that the problems surrounding passwords also multiply. Dashlane cites a Gartner report that found that 20-50% of help desk calls are related to password resets.
While password managers aim to eliminate the most common problems associated with passwords, a master password is still required to access your stored passwords themselves, and something to keep in mind.
Dashlane hopes that by optionally removing the master password, you now have one less worry in the world of credentials.
Dashlane claims its new passwordless way of accessing accounts is resistant to phishing because there are no phrases to use for phishing. It also said, “Passwordless accounts are immune to traditional passwords and multi-factor authentication (MFA) vulnerabilities. Not only does this strengthen the overall security posture, it also removes user friction and provides a more accessible way for people to to access their accounts and protect their personal information.”
While it doesn’t use the exact same technology as keys — although Dashlane sits on the board of the FIDO Alliance, which sets the standard for key technology — the new passwordless login still uses encryption keys. These are “generated with Elliptic Curve Diffie-Hellman (ECDH) to assist in securely exchanging secrets between devices, making setup of new devices fast and secure, and making regaining access simple.”
Although the key is stored on the device, passwordless login is cross-platform and “independent of the user’s hardware and software state.” It should also make the login process faster.
Additionally, Dashlane offers a password-less recovery method for Dashlane account users in case they lose their device, called a Dashlane account recovery key, which is also available for current users who still use their master password.
CEO John Bennett clarified Dashlane’s future intentions, “Launching today’s password-free technology marks a major milestone in our journey toward a password-free future.”
New Dashlane users will be able to set up an account without a password in the coming months, while existing customers will be able to make the switch when the rollout begins later this year.
