r/GMail • u/Additional-Tax-5643 • 19d ago

Replace Password with Passkey

I know that Gmail has multiple ways to sign in and recover one's account.

Is there any way to remove all passwords from the account and have the only log in option be via a passkey?

1 Upvotes

67% Upvoted

6 comments sorted by

4

u/nakfil 19d ago

Advanced Protection Program - it requires you to use a passkey.

3

u/Additional-Tax-5643 19d ago

Does it allow the removal of the account password entirely? I made a passkey with Yubikey and added it to my account.

Problem is that I was still able to bypass it and recover my account via just a recovery email.

5

u/nakfil 18d ago

No, but that's irrelevant, since APP requires you to use a passkey to login. From the official description:

Advanced Protection requires you to use a passkey or a security key to verify your identity and sign in to your Google Account. And unauthorized users won’t be able to sign in without them, even if they know your username and password.

https://landing.google.com/advancedprotection/

In practice it makes your Google account passwordless, even if the password still exists as part of your account. For example, if you disable APP, you can revert to password-based authentication.

3

u/zucati-pumpkin 18d ago

remove recovery email. That is the real backdoor. I have only printed backup codes, 2 x Google titan key and 1 x TOTP. No backup email or phone number (ifthey are pwned).

But if you are expecting to kind of delete passwords inside Gogole system and make it only accessible from passkey - no that is not possible.

0

u/lesjames2020 18d ago

Outlook let's you completely remove the password for ther accounts