Skip to main content

Yahoo is eliminating passwords completely

Yahoo Logo
Ken Wolter / Shutterstock
Be honest, how well organized are you with your passwords? Do you have a different one for each of your online accounts? Or do you use the same one for all of them, something like ‘password12345‘, perhaps?

With tech firms pushing us to hold more and more personal data in the cloud, and a seemingly growing army of hackers doing their level best to get hold of it, online security is more important than ever. Two-step authentication goes some way to improving the situation, but many people don’t bother setting it up.

While for many Web users passwords are still as much of a hassle as they ever were, Yahoo wants to change that. Its recently announced solution is an on-demand system where a unique password is sent to your handset each time you want to log in to your account. In other words, you don’t need to remember a thing.

It only takes a moment to set up, and here’s what to do:

  • First, sign in to your Yahoo account
  • Click on your name top right to visit your account information page
  • Click ‘security’ in the left bar
  • Click the ‘on-demand passwords’ slider to opt in
  • Enter your handset number and wait for Yahoo to send a verification code
  • Enter the code and you’re all set

The next time you go to sign in to your Yahoo account, you’ll receive a single-use four-character password to your phone. If you’re thinking this sounds a bit like two-step authentication without the first step, you’d be right.

While it seems like a convenient solution for anyone who has a hard time remembering passwords, you’ll have to make certain your handset is close by at all times, and you definitely wouldn’t want it falling into the wrong hands.

Yahoo’s is one of an increasing number of solutions offered by firms exploring ways of helping people log in to their accounts more easily, with the main challenge being finding a system that balances security and convenience.

Yahoo’s on-demand passwords are currently available for U.S.-based users only, but hopefully the system will soon be rolled out to those in other countries, too.

[Source: Yahoo]

Editors' Recommendations

Trevor Mogg
Contributing Editor
Not so many moons ago, Trevor moved from one tea-loving island nation that drives on the left (Britain) to another (Japan)…
Hackers are using this incredibly sneaky trick to hide malware
A hacker typing on an Apple MacBook laptop, which shows code on its screen.

One of the most important things you can do to protect your online security is install one of the best password managers, but a recent cyberattack proves that you have to be careful even when doing that. Thanks to some sneaky malware hidden in Google Ads, you could end up with viruses riddling your PC.

The issue affects popular password manager KeePass -- or rather, it attempts to impersonate KeePass by using misleading Google Ads. First spotted by Malwarebytes, the nefarious link appears at the top of search results, meaning you’ll likely see it before the legitimate websites that follow beneath it.

Read more
Google is killing your passwords, and security experts are (mostly) happy
Logging into a Google account with passkeys on an iPhone.

Google is inching closer to making passwords obsolete. The solution is called "Passkeys," a unique form of password that is stored locally on your phone or PC, just the way a physical security key works. The passkeys are protected behind a layer of authentication, which can be your fingerprint or face scan — or just an on-screen pattern or PIN.

Passkeys are faster, linked across platforms, and save you the hassle of remembering passwords for websites or services that you have subscribed to. There is a smaller scope for human error, and the risks of 2-factor authentication code interception are also reduced.

Read more
Bing Chat just beat a security check to stop hackers and spammers
A depiction of a hacker breaking into a system via the use of code.

Bing Chat is no stranger to controversy -- in fact, sometimes it feels like there’s a never-ending stream of scandals surrounding it and tools like ChatGPT -- and now the artificial intelligence (AI) chatbot has found itself in hot water over its ability to defeat a common cybersecurity measure.

According to Denis Shiryaev, the CEO of AI startup Neural.love, chatbots like Bing Chat and ChatGPT can potentially be used to bypass a CAPTCHA code if you just ask them the right set of questions. If this turns out to be a widespread issue, it could have worrying implications for everyone’s online security.

Read more