Protecting Users from Deception
summary
Chrome reports 3.3 billion leaked username/password pairs in public breaches and measures that phished credentials make accounts 500 times more likely to be hijacked. Safe Browsing now protects over 4 billion devices and adds real‑time predictive phishing checks when a Google password is entered on non‑Google sites. Adoption of FIDO/WebAuthn (Titan keys and Android’s built‑in security key) eliminates phishing risk; Google records zero successful phishing breaches after key deployment, Yahoo Japan cuts sign‑in time 37.5%, and biometric reauth hits ~89% success versus 65% for passwords.
AI-written summary · about
chapters (13)
- 0:00Intro
- 0:27Its no secret passwords
- 1:45Sources of stolen passwords
- 4:02Safe Browsing API
- 5:18Predictive Phishing Protection
- 6:44Mobile Subscriptions
- 9:10Multifactor Authentication
- 13:39Security Keys
- 15:57W3C Fido Alliance
- 18:48Authentication
- 21:34Implementation
- 24:21User Journey
- 30:26Context Sharing
related talks
32mWhat We Can Learn from Google’s Fight with Phishing
18mEffective password management
29mWebAuthn and security keys - unlocking the key to authentication
10mUsers' Perceptions of Chrome Compromised Credential Notification
24mSecuring the Enterprise: How to use passkeys/WebAuthn to become phishing resistant today
26mWebAuthn 101 - Demystifying WebAuthn
15mPasskeys for Google accounts: learnings and our shared path forward
27mPasskeys on Google platforms: updates on latest features and real-world successes