Google’s One Tap lets you sign into websites and apps without a password

Google has unveiled Google Identity Services, a set of standard interfaces that lets developers integrate Google’s One Tap for faster user sign-ups and simpler sign-in. 

Google Identity Services aims to make it easier for businesses to gain new users and make life easier for users to sign in. It’s available as a software development kit containing its Identity APIs, including the Sign with Google button as well as the new One Tap prompt. 

“Sign in with Google and One Tap use secure tokens, rather than passwords, to sign users into partner websites and apps,” says Filip Verley, a product manager on the Google Identity team. 

SEE: Cloud security in 2021: A business guide to essential tools and best practices

The easier sign-up and sign-in processes are meant to help end users avoid the pressure of picking convenience over security when deciding on yet another password for an app or website.

The One Tap prompt brings the login to the user on the page they’re at on a given website. So, instead of being interrupted when redirected to a landing page, the One Tap prompt slides down from the top right of a website and from the bottom up on a mobile device. 

“Users can sign in to or sign up using just one tap, without having to remember their credentials or to create a password,” explains Verley. 

Google has also improved the Sign with Google Button – the buttons users see that show which Google Account they’re signing in to a website with – so that it displays more personalized user details when returning to a site. 

Reddit has implemented the new Sign in with Google button and the One Tap prompt. Pinterest has also implemented the Google Identity Services APIs. According to Google, Reddit has increased new user sign up and returning user conversion by almost twice.      

Key to One Tap sign-ups are ID tokens that are generated for users with Google Accounts on a device. The ID token is shared with the website operator.   

SEE: Attacks on critical infrastructure are dangerous. Soon they could turn deadly, warn analysts

“When you display the One Tap UI, users are prompted to create a new account with your app using one of the Google Accounts on their device,” Google explains in its developer pages. 

“If the user chooses to continue, you get an ID token with basic profile information—their name, profile photo, and their verified email address—which you can use to create the new account.”

Currently, Google One Tap works with Chrome on Android, macOS, Linux and Windows 10. No mobile browser is supported on iOS. Edge on macOS and Windows 10 is supported, while Firefox is supported on Android, macOS, Linux and Windows. 

Google notes that One Tap is not supported on Safari for iOS and macOS because of Apple’s Intelligent Tracking Prevention. 

Article source: https://www.zdnet.com/article/googles-one-tap-lets-you-sign-into-websites-and-apps-without-a-password/#ftag=RSSbaffb68