Latest in Gear

Image credit: Project Verify

US carriers create single sign-on service that could end passwords

Project Verify may let you ditch your password manager for good.
441 Shares
Share
Tweet
Share
Save
Project Verify

AT&T, Sprint, T-Mobile and Verizon have teamed up to create a single sign-on service that could mean you won't have to use a password manager or remember your (hopefully strong) login credentials for every app on your phone. The carriers say Project Verify can authenticate your logins by confirming your identity using factors like your phone number, SIM card information, the type of phone account you have, IP address and how long you've had your plan.

Once it's up and running, you'll be able to use the Project Verify app to log into services that have enabled it as an option. It can display your latest sign ins to each app, and you can revoke access for those you don't use anymore. The technology can also be used for two-factor authentication.

It'd be difficult for a hacker to spoof all of the methods that Project Verify uses to establish your identity, so it seems somewhat secure. However, if someone were to steal your phone and were able to unlock the device, they could cause all kinds of chaos.

Some apps could require additional login data like a PIN or your fingerprint, a spokesperson told The Verge -- that'd add an extra layer of security for services that handle your most sensitive information. But if the apps stick with the core version of Project Verify's login process and someone accesses your device, every service you use could be compromised.

Verizon owns Engadget's parent company, Oath (formerly AOL). Rest assured, Verizon has no control over our coverage. Engadget remains editorially independent.

From around the web

ear iconeye icontext filevr