- Okhiye bokungena bashintsha amagama ayimfihlo bafake i-cryptography yomphakathi neyimfihlo futhi amelana nobugebengu bokweba imininingwane ebucayi.
- Ukusebenzisana okubanzi kuyo yonke i-iOS, i-Android, ne-Windows ngokuvumelanisa kuyo yonke i-Apple ne-Google; IWindows Hello imvamisa ingeyasendaweni.
- Angadalwa, asetshenziswe, futhi aphathwe ku-Google, iziphequluli, nezilungiselelo zesistimu; izinketho zikhona kusetshenziswa okhiye be-FIDO2.
- Izindlela ezihamba phambili: izindlela zokwenza ikhophi yasenqolobaneni, amadivaysi abuyekeziwe, ukugwema ukuncika ocezwini olulodwa lwesisetshenziswa, nokuqinisekisa ukuhambisana.
Uma ukhathele ukulwa namagama ayimfihlo, okhiye bokudlula bawunkulunkulu: bayiziqinisekiso zesimanje ezikuvumela ukuthi ungene nge-biometrics noma i-PIN ngaphandle kokuthi ubambe ngekhanda noma yini. Umqondo uwukuvalelisa kumaphasiwedi endabuko futhi uzuze kukho kokubili ukuphepha nokunethezeka.
Kulo mhlahlandlela uzoqonda ukuthi ziyini, kungani zivikeleke kakhulu, zisebenza kanjani futhi ziphathwe kanjani ezinhlelweni ezinkulu namasevisi, nokuthi yini okufanele uyenze uma kukhona okungahambi kahle. Sihlanganisa izindlela ezivela ku-Google, Apple, Microsoft, imihlahlandlela esebenzayo, nezimo zomhlaba wangempela. (kuhlanganise nokusebenza kwayo ezinhlanganweni ezifana ne-Soyio noma ezindaweni ezine-Bluetooth ekhawulelwe) ukuze uphume nakho konke okudingayo.
Ayini ama-passkeys futhi asebenza kanjani?
Ukhiye wokudlula uwubufakazi bedijithali obususelwe kumbhalo oyimfihlo wokhiye womphakathi othatha indawo yephasiwedi ejwayelekile. Idivayisi yakho ikhiqiza ipheya yokhiye ehlukile yesevisi ngayinyeUkhiye oyimfihlo uhlala ugcinwe ngokuphephile kukhompuyutha yakho, futhi ukhiye osesidlangalaleni ubhaliswe kuseva yesayithi.
Uma uqinisekisa, isevisi ikuthumela inselele futhi idivayisi yakho iyisayinda ngokhiye oyimfihlo ngemva kokuqinisekisa endaweni nge-Face ID, i-Touch ID, i-Windows Hello noma i-PIN. Ukhiye oyimfihlo awulokothi ushiye idivayisiFuthi ukuqinisekiswa kwenzeka kuphela esizindeni esisemthethweni sesevisi sibonga i-WebAuthn, evimba ubugebengu bokweba imininingwane ebucayi ngedizayini.
Okhiye bokudlula bangahlala ezindaweni ezimbalwa: ku-iCloud Keychain, ku Isiphathi sephasiwedi ye-Google, esitolo sendawo se-Windows Hello noma ngisho nakukhiye wokuqinisekisa ubunikazi we-FIDO2. Kuya ngokuthi zigcinwe kuphi, zingavunyelaniswa phakathi kwamadivayisi. (I-Apple ne-Google) noma zihlale ziboshelwe kudivayisi eyodwa (iWindows Hello, ezikhathini eziningi).
Kungani evikeleke kakhulu kunamagama-mfihlo
Ngamagama ayimfihlo, iseva igcina izimfihlo ezisebenzisekayo futhi kufanele ukhumbule izintambo eziyinkimbinkimbi; ngokhiye bokudlula, iseva igcina kuphela ukhiye osesidlangalaleni futhi idivayisi yakho ivikela eyimfihlo. Lokhu kunciphisa umthelela wokuvuza futhi kuqede ukuhlasela okunonya nokusetshenziswa kabusha kwedatha..
Ngaphezu kwalokho, ayakwazi ukumelana nobugebengu bokweba imininingwane ebucayi: Ukhiye wokudlula usebenza kuphela esizindeni odalelwe sona.Uma umhlaseli ezama ukukukhohlisa ngewebhusayithi mbumbulu, ukufakazela ubuqiniso ngeke kuphele. Futhi ngokungathayiphi amaphasiwedi, ama-keylogger agxile ekuthwebuleni lokho okuthayiphayo nezinsongo ezifana [nokulandelayo] ziyanyamalala. ukwebiwa kwamakhodi okuqinisekisa.
Okuhlangenwe nakho nakho kuyathuthukiswa: ungafinyelela kukho ngokuthinta, ubuso bakho, izigxivizo zeminwe noma i-PIN, ngaphandle kokusetha kabusha amaphasiwedi noma ukulinda imilayezo ye-SMS. Ukufakazela ubuqiniso kuyashesha futhi kwenzeka endaweniokusiza futhi ezimeni ezinokuxhumeka okulinganiselwe.
Ukuhambisana kwenkundla kanye nezidingo
Ku-iOS ne-iPadOS kusukela kunguqulo 16 kuye phambili, naku-macOS, ukusekelwa kokhiye wokudlula kuhlanganiswe ne-iCloud Keychain. Udinga nje ukusetha i-Face ID noma i-Touch ID. futhi unike amandla ukuqedela ngokuzenzakalela ukuze isistimu iphakamise ukudala nokusebenzisa okhiye bokudlula uma amasayithi ekuvumela.
Ku-Android, ukuqala nge-Android 9 enamasevisi abuyekeziwe e-Google Play kanye ne-Chrome 108 noma ngaphezulu, ungakha futhi usebenzise okhiye bokudlula Nge-Google Password Manager. Nika amandla i-Google Autocomplete futhi ulungiselele ukukhiya isikrini (i-PIN/i-biometrics) ukuze yonke into ihambe kahle.
Ku-Windows 10 (1903) kanye ne-Windows 11, ukhiye wukuthi i-Windows Hello isebenze (i-PIN, izigxivizo zeminwe noma ubuso). Iziphequluli ezisekelwayo zifaka i-Chrome, i-Edge, neFirefox (kusukela ngezinguqulo ezithile zakamuva). I-Windows iphinde inikeze isixhumi esibonakalayo sokuphatha okhiye bokudlula abalondoloziwe kusuka Windows 11 I-22H2 enezibuyekezo ezithile eziqoqiwe.
Mayelana namalayisense nezinhlelo, ukwesekwa kokhiye wokudlula kuyatholakala ku-Windows Pro, Enterprise, Pro Education/SE, kanye ne-Education. Amalungelo okusebenzisa ambozwa amalayisense afana ne-Enterprise E3/E5 kanye ne-Education A3/A5Ngakho-ke, ukuthunyelwa kwayo ezindaweni zezinkampani kusebenza ngokugcwele.
Yenza kusebenze ukhiye wakho wokudlula ku-Google
I-Google ikuvumela ukuthi udale ukhiye wokungena ohlotshaniswa ne-akhawunti yakho ukuze ungene ngaphandle kwephasiwedi. Isinqamuleli siwukungena ku-akhawunti yakho ye-Google futhi uvule Ezokuphepha., thola Okhiye Bokungena bese ukhetha Dala ukhiye wokufinyelela.
Inqubo izokucela ukuthi uqinisekise ubuwena futhi, uma ukudivayisi yeselula, izosebenzisa i-biometrics. Uma usebenzisa isiphequluli kukhompuyutha yakho, ungaxhuma iselula ngokuskena ikhodi ye-QR. ukuze uqinisekise ukuthi ungubani isiphequluli sakho esithi ungubani, usebenzisa ifoni yakho njengesiqinisekisi.
Uma isidaliwe, Isiphathi Sephasiwedi Ye-Google sivumelanisa ukhiye wokungena namadivayisi akho lapho ongene khona ngemvume ku-akhawunti yakho. Ngeke kudingeke ukhumbule lutho noma ulungiselele into efanayo kudivayisi ngayinye.: uzodinga kuphela ukuqinisekisa endaweni kudivayisi oyisebenzisayo.
Ukudala nokusebenzisa okhiye bokudlula ekusebenzeni
Ukuze udale ukhiye wakho wokungena wokuqala, vakashela isayithi elisekelwayo (i-Google, i-GitHub, i-Microsoft, noma amasayithi okuhlola afana ne-passkeys.io) bese ubheka inketho yokudala ukhiye wokungena kuzilungiselelo zabo zokuphepha. Landela imiyalelo yesistimu futhi uqinisekise nge-Face ID, i-ID yokuthinta, i-Windows Hello noma i-PIN yakho.
Lapho ungena, ukulandelana kuvamise ukuthi: faka igama lomsebenzisi uma kunesidingo, khetha Sebenzisa ukhiye wokungena bese uqinisekisa ngendlela yangakini. Ezinye iziphequluli zibonisa iziphakamiso ze-akhawunti zisebenzisa isixhumi esibonakalayo esinemibandela.ngakho-ke ngeke kudingeke ukuthi uthinte isiphakamiso ukuze uqedele yonke inqubo.
Uma inketho yokhiye wokudlula ingaveli, kungenzeka ukuthi isayithi ayikayisekeli, noma udinga ukulungisa i-biometrics/PIN noma ubuyekeze isiphequluli sakho. Ngezinguqulo zakamuva ze-iOS, i-Android, ne-Windows, kanye neziphequluli ezisesikhathini samanjeOkuhlangenwe nakho ngokuvamile kuba ngokushesha.
Lapho zigcinwa khona futhi zivumelaniswa kanjani
I-Apple ivumelanisa okhiye bokudlula ne-iCloud Keychain phakathi kwe-iPhone, i-iPad, ne-Mac, futhi ikuvumela ukuthi usebenzise i-keychain ku-Windows nge-iCloud ye-Windows kanye nesandiso esihambisanayo. Lokhu kwenza kube lula ukusebenzisa okhiye bakho kuyo yonke i-ecosystem ye-Apple. frictionless.
I-Google igcina futhi ivumelanisa okhiye bokudlula ne-akhawunti yakho Ngesiphathi Sephasiwedi esakhelwe ku-Android ne-Chrome. Ku-iOS, ungasebenzisa futhi i-Chrome njengomhlinzeki wokugcwalisa okuzenzakalelayo. ukuze ufinyelele okhiye bokudlula be-Google ku-iPhone ne-iPad.
I-Windows Hello ngokuvamile igcina okhiye bokudlula endaweni kudivayisi. Lokhu kusho ukuthi lo khiye wokudlula awuhambi phakathi kwamakhompyutha e-Windows ngokuzenzakalelayo.Nokho, ungangena ku-PC usebenzisa ukhiye wakho wokudlula weselula ngokuskena ikhodi ye-QR lapho isayithi likuvumela.
Ungaphinda ukhethe okhiye bokuqinisekisa ubunikazi be-FIDO2 ukuze uphathe izifakazelo zakho kuzingxenyekazi zekhompuyutha ezizinikele. Ziwusizo ezindaweni ezivikeleke kakhulu noma uma ukhetha into ephathekayo ephathekayo enqanyuliwe ohlelweni.
Inothi elisebenzayo: abanye abaphathi kanye ne-ecosystems bakhuthaza ukuvimba endaweni yabo. Ukuze ugweme ukuthembela kumhlinzeki oyedwa nje, ungabhalisa okhiye bokudlula abaningi. yesevisi efanayo ezindaweni zokugcina izimpahla lapho isevisi ivuma.
Okhiye bokungena ku-Windows: ukudala, ukusetshenziswa nokuphatha
Uma udala ukhiye wokungena ku-Windows, uhlelo luzokunikeza inketho yokuwulondoloza endaweni (evikelwe nge-Windows Hello), sebenzisa idivayisi yeselula eseduze (i-iPhone, i-iPad noma i-Android) njengesiqinisekisi, noma uyibhalise kukhiye we-FIDO2. Uma ukhetha iselula, ngokuvamile uzodinga ukuskena ikhodi ye-QR. futhi wenze i-Bluetooth inikwe amandla ukuze kuqinisekiswe phakathi kwamadivayisi.
Uma isayithi noma uhlelo lokusebenza lusekela okhiye bokudlula futhi uneyodwa egcinwe endaweni ku-Windows, ukungena ngemvume kuzobiza i-Windows Hello ngokuzenzakalelayo. Uma ukhetha ukusebenzisa ukhiye wokudlula osefonini yakho noma ukhiye we-FIDO2Khetha leyo nketho kungxoxo bese uqedela ukufakazela ubuqiniso.
Ukuqala nge-Windows 11 22H2 ngezibuyekezo ezithile, Izilungiselelo zihlanganisa nesigaba sokubuka nokususa okhiye bokufinyelela abagciniwe. Ungakwazi ukuhlunga ngamagama futhi ususe lawo ongawadingi.Lokhu kwenza kube lula ukuhlanzeka kokuqinisekisa ezintweni ezabiwe noma ezindala.
Sebenzisa ezindaweni ezine-Bluetooth ekhawulelwe
Ezilungiselelweni zebhizinisi lapho i-Bluetooth inomkhawulo noma ivaliwe, ukufakazela ubuqiniso phakathi kwamadivayisi (isb., ukusebenzisa umakhalekhukhwini wakho ukuze ungene ku-PC yakho) kungase kuthinteke. Izinhlangano zingavumela izimo zokusetshenziswa ezicaciswe kakhulu ngokunika amandla iziqinisekisi ze-FIDO2 nge-Bluetooth futhi uvimbele okusele.
Lokhu kungafezwa nge-Bluetooth nezinqubomgomo zokufakwa kwedivayisi, ukukhawulela amasevisi angafuneki namadivayisi futhi kuvunyelwe kuphela lezo ezidingekayo zokhiye bokudlula. Kungenzeka ukusebenzisa lezi zinqubomgomo nge-MDM futhi uzenze ngokuzenzakalelayo ngemibhalo., ngemva kokuzihlola ngezikhathi eziphakeme ngamathuluzi okuphatha akude.
Okhiye bokudlula abane-Microsoft Authenticator kuselula
Kuma-akhawunti aphethwe nge-Microsoft (njengasenyuvesi noma ezindaweni zebhizinisi), I-Microsoft Authenticator ingasebenza njengomhlinzeki wokhiye wokudlula kudivayisi yeselula. I-Android 14 noma i-iOS 17 iyanconywa futhi ufake uhlelo lokusebenza lubuyekezwe.
Ukugeleza okuvamile: Uvula Isiqinisekisi, ungeze i-akhawunti yakho yomsebenzi noma yesikole, uphumelele ukuqinisekiswa kokuqala kwe-MFA, bese ukhetha Okhiye Bokungena njengendlela yakho. Gunyaza Isiqinisekisi ukuthi siphathe okhiye bokudlula kudivayisi yakho bese uqedela ukusetha okuqondisiwe kuhlelo lokusebenza.
Ungasebenzisa lowo khiye wokungena ukuze ungene usebenzisa iselula yakho noma ukuze uqinisekise ukufinyelela kwamanye amadivayisi aseduze nge-Bluetooth. Uma ulahlekelwa ifoni yakho, lezi zikhiye zokudlula zixhunywe kudivayisi futhi ngeke zivunyelaniswe. ngokusebenzisa ifu kulesi simo, ngakho-ke kuhle ukubhalisa idivayisi engaphezu kweyodwa.
Uma ushintsha iselula yakho, ungasusa okhiye bokudlula ngokuya ekhasini lakho lemininingwane yezokuphepha ye-akhawunti ye-Microsoft (mysignins.microsoft.com/security-info). Lapho uzobona ukuthi ukhiye wokungena ngamunye uhlala kuluphi uhlobo lwedivayisi futhi uzokwazi ukuhoxisa. ukugcina yonke into ilawulwa.
Okhiye bokudlula e-Soyio: ubunikazi obuqinisekisiwe, izimvume namasiginesha
Ku-ecosystem ye-Soyio, okhiye bokudlula bahlanganiswa kumamojula wobunikazi nawemvume. Phakathi nenqubo Yokudalula, uqala ngokuqinisekisa ubuwena Ngokuhlinzeka ngedokhumenti nesithombe ozishuthe sona, unikeza imvume futhi ubuwena obuqinisekisiwe buyakhiwa.
Ngaleso sikhathi ungakwazi ukubhalisa ukhiye wokudlula kudivayisi yakho usebenzisa i-Face ID, i-Touch ID, i-Windows Hello, noma i-PIN, kuye ngeplatifomu. Ukusuka lapho, ukhiye wokudlula usetshenziselwa ukugunyaza izenzo ezibucayi ngaphandle kokuthembela kumaphasiwedi, ukunciphisa ukungqubuzana nokuqinisa ukuphepha.
Kumamojula afana ne-AuthRequest, uzocelwa ukhiye wokudlula ukuze wenze imisebenzi ebalulekile; kuSiginesha, uqinisekisa ukusayinwa kwamadokhumenti; futhi kokuthi Imvume, uqinisekisa izinguquko kokuncanyelwayo kobumfihlo. Ukhiye wokudlula uqinisekisa ukuthi nguwe kuphela ongenza lezo zenzo., ngendlela esheshayo neqinisekisayo.
Ukuboniswa okusebenzayo nge-Chrome kanye newebhusayithi yokuhlola
Uma ufuna ukuyizama ingenabungozi, amasayithi afana ne-passkeys.io akuvumela ukuthi ubhalise futhi usebenzise okhiye bokudlula nge-imeyili yokuhlola. Ngena ngemvume nge-Chrome, qala ukubhaliswa kwe-dummy bese ukhetha ukudala ukhiye wokudlula kuleso sizinda.
I-Chrome izokubonisa izinketho ezinjengokugcina ukhiye wokungena ku-Google Password Manager noma ukuyihlobanisa neWindows Hello uma uku-Windows. Ungabhalisa okhiye bokudlula abaningi ku-akhawunti efanayo futhi uhlole kokubili ukungena ngemvume kwasendaweni kanye nokusetshenziswa kwedivayisi eyengeziwe.
Bese, ngokuchofoza okuthi Ngena ngemvume ngokhiye wokungena kulelo sayithi, khetha imininingwane bese uqinisekisa nge-biometrics yakho noma i-PIN ukuze uyifake. Ku-Windows, uzothola isigaba kokuthi Izilungiselelo ukuze ubuyekeze futhi ususe okhiye bokufinyelela. Indawo. Kokunye ukugeleza kwe-Google, ukuphatha okubonakalayo kungahluka kuye ngenguqulo nendawo.
Ukuxazulula izinkinga ezivamile
Uma ungayiboni inketho yokhiye wokudlula, kungenzeka kungenxa yokuthi isayithi alikakayisebenzisi, isiphequluli sakho siphelelwe yisikhathi, noma udinga ukulungisa i-Face ID, i-Touch ID, i-Windows Hello, noma i-PIN. Ukubuyekeza isiphequluli sakho kanye nokuvumela ukuqinisekiswa kwasendaweni kuvame ukuyixazulula inkinga..
Uma ungakwazi ukungena ngemvume, qinisekisa ukuthi indlela yakho yasendaweni (i-biometrics/PIN) iyasebenza nokuthi ukuvumelanisa kunikwe amandla ku-iCloud Keychain noma ku-Google Password Manager. Zama ukusebenzisa i-akhawunti efanayo kwenye idivayisi ukuze ubone ukuthi okhiye bokudlula abavumelanisiwe yini. futhi usebenzise izindlela zokusekelayo njengesinyathelo sokugcina.
Uma ulahlekelwe noma Idivayisi yakho yebiwe lapho ugcine khona okhiye bokudlula, sebenzisa enye idivayisi evumelanisiwe noma amakhodi okuthola kabusha isevisi, uma ekhona. Ukuxhumana nosekelo kungase kudingeke ukuze uphinde uthole ukufinyelela lapho ingekho enye indlela etholakalayo.
Ingabe basebenza ngaphandle kwe-inthanethi? Ukufakazela ubuqiniso kwasendaweni kwenza, ngoba inselele isayinwe kudivayisi; kodwa ukudala okhiye bokudlula abasha noma ukuvumelanisa phakathi kwamadivayisi kudinga uxhumano. Gcina lokhu engqondweni uma uzosebenza ukude noma unenethiwekhi engasebenzi kahle..
Imikhuba emihle nezinyathelo zokuphepha
Yenza kusebenze izindlela zokuphinda uthole futhi ugcine amakhodi uma isevisi iwanikeza. Gcina amadivayisi akho neziphequluli zisesikhathini samanje ukuze ujabulele ukuhambisana nokuvikeleka okungcono kakhulu.
Unganciki kudivayisi eyodwa kukho konke. Bhalisa ukhiye wokudlula kudivayisi engaphezu kweyodwa noma uhlanganise iselula, i-PC kanye nokhiye we-FIDO2 Uma indawo okuyo ikuvumela, ngeke ushiywe dengwane lapho ubhekene nokulahlekelwa noma ukuwohloka.
Hlola ukuthi amasevisi owasebenzisayo ngokuvamile asekela okhiye bokudlula nalapho ugcina khona ukhiye wokungena ngamunye. Uma usebenza ngedatha ebucayi, cabanga ukusebenzisa ihadiwe ye-FIDO2. kanye nezinqubomgomo ezivimbelayo ezindaweni zezinkampani ukuze kuncishiswe indawo yokuhlasela.
Okhiye bokudlula, i-2FA ne-MFA: ukuthi bahlangana kanjani
Ngisho noma ungayifaki ikhodi yesici sesibili, okhiye bokudlula bafaka ngokungagunci izici eziningi: into onayo (idivayisi yakho/ukhiye oyimfihlo) nento oyikho noma oyaziyo (i-biometrics noma i-PIN). Yingakho bengakwazi ukufaka esikhundleni samaphasiwedi endabuko kanye ne-2FA. enikeza ukungqubuzana okuncane nokuphepha okwengeziwe.
Uma isevisi ingakakuvumeli ukuthi ufake kabusha iphasiwedi yakho ngokuphelele, ukhiye wokudlula ungasebenza njengento yesibili eqinile. Ukuthuthuka okuphawulekayo ngaphezu kwamakhodi e-SMS noma e-TOTP, ezisengozini enkulu yobugebengu bokweba imininingwane ebucayi noma ukwebiwa kwe-SIM.
Amanothi okusebenza nawomkhiqizo
Ezimweni ezithile zokusebenza, abanikazi besikhala bangase bangakwazi ukwenza okhiye bokudlula basebenze kubo bonke abasebenzisi ngalesi sikhathi. Uma udinga lesi sici emhlabeni jikelele, sicela uthumele impendulo yakho kumhlinzeki. ukubeka phambili ukuqaliswa kwayo.
Ku-ecosystem ye-Windows, khumbula ukuthi okhiye bakho bokudlula bahlala kuphi: okwasendaweni ne-Windows Hello, evumelaniswa ne-Google uma uyidale nge-Chrome, noma ku-iCloud uma uvela ku-Apple. Ngokusetshenziswa kwenkundla, umphathi wephasiwedi ohambisanayo noma ukhiye we-FIDO2 Ingasebenza njengebhuloho.
Uma inhlangano yakho ikhawulela i-Bluetooth, sebenzisana ne-IT ukuze usebenzise izinqubomgomo nohlu lwemvume lweziqinisekisi ze-FIDO2. Lokhu kuvumela ukufakazela ubuqiniso phakathi kwamadivayisi ngaphandle kokuvula umnyango kwamanye amaphrofayili e-Bluetooth angafuneki..
Okhiye bokudlula bamele inkathi entsha yokuqinisekisa: okulula kakhulu, okuvikeleke kakhulu, nokusekelwa okusabalele kuzo zonke izinkundla ezinkulu. Qala ngokwakha uchungechunge lwakho lokhiye kumakhalekhukhwini noma isiphequluli osisebenzisa nsuku zonke, bese ubhalisa indlela yesibili. bese uzama ukungena ngemvume kwangempela ezinsizeni zakho ezijwayelekile ukuze ufake ukugeleza ngaphakathi futhi uthole ukuzethemba. Yabelana ngalesi sifundo ukuze abasebenzisi abengeziwe bakwazi ukufunda ukuphatha ukuphepha kwabo ngezici Zokhiye Wokudlula.