Dismiss this notice
EaseUS Partition Master Professional Halloween 2020 Giveaway - [Only registered and activated users can see links Click here to register]

Dismiss this notice
SoftMaker Office Standard 2021 Halloween 2020 Giveaway - [Only registered and activated users can see links Click here to register]

Dismiss this notice
Advanced Uninstaller PRO Halloween 2020 Giveaway - [Only registered and activated users can see links Click here to register]

Dismiss this notice
O&O Defrag 24 Professional Halloween 2020 Giveaway - [Only registered and activated users can see links Click here to register]

Thread Rating:
  • 1 Vote(s) - 5 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Chrome 86 to feature improved password reset capabilities
#1
Information 
Quote:
[Image: chrome-change-password-link.png]

Many modern web browsers include functionality to determine if saved passwords have been leaked in the past. Companies like Google or Mozilla maintain databases of leaked passwords and compare the hashes of these against passwords stored by users in the browser. If a match is found, the password has been leaked and is considered insecure.

A suggestion to reset the password is then displayed to the user. That process needs to be done manually as the user needs to visit the site the password was saved for and use the available password reset functionality on that site. Browsers may provide a link to the site but that is usually all the help that users get.

Apple introduced a new security feature in Safari that establishes a fixed path for password reset operations. The path uses the format /.well-known/change-password; since it is known, Apple may redirect users directly to the path if a password needs to be reset instead of the homepage of the service. The URL redirects automatically to the actual password reset page of the site.

Google plans to introduce support for the format in Chrome 86. The upcoming version of the web browser is expected to be released on October 6, 2020.

Chrome displays a change password button next to compromised passwords. A click on the button loads the password reset page if the site in question supports the "/.well-known/change-password" format, or to the site's homepage if there is no other fallback that Google knowns about.

An "Intent to Ship" post [Only registered and activated users can see links Click here to register] official Blink Dev group confirms Google's plan to ship the feature in the browser.
 
Quote:Websites can set a well-known change-password URL using the format, '/.well-known/change-password', to allow users to quickly navigate to a page allowing them to change their password. Chrome will leverage this URL to help users easily change their weak / compromised passwords following a bulk password check (Desktop, Android, iOS). We want to ship this to 100% in M86.

Tip: Chrome Beta and Canary uses may enable the feature right now by loading chrome://flags/#well-known-change-password in the browser's address bar and setting the experimental flag, called Support for .well-known/change-password', to Enabled, and restarting the browser afterwards.

Google published an article about the new feature on its [Only registered and activated users can see links Click here to register] website already in which it informs webmasters and companies about the new format.

Major web companies, including Google, Twitter, Facebook, GitHub and WordPress, use the format already on their sites to improve the resetting of passwords. Apple's Safari browser supports the feature since 2019. Google plans to introduce support in Chrome 86, and Mozilla considers it [Only registered and activated users can see links Click here to register] but has not decided yet whether the feature will be implemented in the Firefox web browser. Firefox users may keep track of [Only registered and activated users can see links Click here to register] on Bugzilla to find out if the feature does get implemented in the browser.

Now You: Would you use such a feature, if your favorite browser/password manager would implement it?
...
[Only registered and activated users can see links Click here to register]
[-] The following 1 user Likes harlan4096's post:
  • silversurfer
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)
[-]
Welcome
You have to register before you can post on our site.

Username:


Password:





[-]
Recent Posts
Microsoft is investigating these known W...
Microsoft is inves...silversurfer — 17:14
Microsoft fixes known issue blocking Win...
Microsoft has reso...silversurfer — 17:12
ProtonMail launches Import Assistant for...
ProtonMail has ann...silversurfer — 17:06
Google is testing the addition of shoppi...
Google is testing ...silversurfer — 17:04
Xbox Live issue preventing Xbox One and ...
If you were lookin...silversurfer — 16:57

[-]
Birthdays
Today's Birthdays
avatar (39)viecontAceve
Upcoming Birthdays
avatar (42)Michaelaceve
avatar (32)QuadirLigh

[-]
Online Staff
There are no staff members currently online.

>