I ka tɔgɔlasɛbɛnw bɛɛ tununna (iCloud Keychain / Google Password Manager / YubiKey): Jatebɔsɛbɛn seginni ni tɔgɔlasɛbɛn tɛ¶

Ni i bɔnɛna i ka telefɔni seleke naani ni ɔridinatɛri la waati kelen na - a kɛra binkanni ye, bagaji sonya jamana kɔkan, so tasuma, sanjiba, walima fɛnɲɛnɛmafagalanw tiɲɛni waati kelen na - o bɛ bi dasiri sirannin dɔ lawuli: the Circular Passkey Dependency Trap. N'i y'a ɲini ka don ɔridinatɛri kura kɔnɔ walima telefɔni wɛrɛ la walasa k'i ka ɲɛnamaya sɔrɔ kokura, dondaw b'a ɲini i fɛ i "I ka baara kɛ ni tɛmɛsira ye i ka telefɔni na walima ka nin QR code in scan n'i ka kamera ye" (Cross-Device Authentication / . CTAP 2.2 Hybrid Transport). Sabula telefɔni min tun b’i ka tɛmɛsiraw minɛ (iCloud Keychain / Apple Passwords, . Google Password Manager, . 1Password, . Bitwarden, walima Windows Hello). I kana siran: fo n’i bɔnɛna Apple Recovery Key ladamulen 28-sɛbɛnni ANI minɛn dannamɔgɔ bɛɛ, walima n’i y’i tɔgɔ sɛbɛn Zero-fallback Hardware Security Key (YubiKey) porogaramu na ani ka farikolo-ɲɛnajɛ-minɛn sɛbɛnnenw bɛɛ tunun, i ka tɛmɛsira sinsinnanw TƐ datugu telefɔni tununnen ka siliyɔmu farikoloma kɔnɔ. Sankaba-sɔrɔsiraw (multi-device credentials FIDO2 / WebAuth ka ɲɛfɔli kɔnɔ) bɛ mara sankaba-yɔrɔ sirilen dɔ kɔnɔ min bɛ bɔ laban na ka taa a laban na (iCloud Keychain Escrow walima Google Password Manager Security Domain) min bɛ se ka da wuli minɛn kura wɛrɛ kan min bɛ se ka bila a nɔ na ni i ka telefɔni kɔrɔ ka lock-screen passcode/PIN + SIM/eSIM selilɛri nimɔrɔ wɛrɛ ye. Ni aw b’a fɛ ka authenticator app TOTP lockouts sɔrɔ, aw ye lajɛ fana kɛ MFA lockout ani authenticator seginni; ni aw ka telefɔni tabaga ye aw ka telefɔni nimɔrɔ lasegin a cogo kɔrɔ la k’aw to kɛnɛma, aw ye a lajɛ telefɔni nimɔrɔ min bɛ se ka kɛ fɛn fila ye, o min bɛ segin ka kɛ fɛn ye min bɛ se ka baara kɛ ni a ye; walima n’i ɲinɛna i ka master password kɔ ka taa mɔgɔ sabanan ka vault kɔnɔ, i k’a lajɛ password manager lockout ani vault seginni. Ni aw ka minɛnw sonyalen don dɔrɔn binkanni jugu dɔ senfɛ walima so binkanni na, aw bɛ aw ka sigida kɔrɔtɔko nimɔrɔ wele (911 Ameriki ni Kanada jamanaw na, . 112 Erɔpu tɔnba kɔnɔ, . 999 Angletɛri jamana na) ka bɔ mɔgɔ dɔ ka telefɔni na walima ka an ka diɲɛ kɔnɔ kunnafonisɛbɛn lajɛ min tɔgɔ ye ko kɔrɔtɔko nimɔrɔw.

Aw bɛ o kɛ sisan¶

1. Sanni fɛn wɛrɛ ka kɛ, i k’a faamu mun na i tɛ se ka Apple iCloud Passkey lasegin Windows PC dɔrɔn kan (walima Google Passkey lasegin navigatɛri la min tɛ Chrome ye ni i tɛ i ka telefɔni ye):
2. Ni i ye "Sign in with a passkey" digi Windows PC kan ani a bɛ QR code jira min b'a ɲini i fɛ i k'a scan ni i ka iPhone ye (FIDO Cross-Device Authentication / caBLE), o QR kode bɛ Bluetooth + ɛntɛrinɛti bolonɔbila ɲɛnama de wajibiya ni iPhone/iPad/Mac farikoloma ye min b’i ka iCloud Keychain da wuli kaban.
3. I TƐ SE k’i ka iCloud Keychain tɛmɛsira telesarse k’a ɲɛsin Windows navigatɔrɔ yɛrɛma ma ni Apple minɛn tɛ (fo n’i tun ye iCloud for Windows sɛgɛsɛgɛ kaban ka kɔn o ɲɛ). Walisa ka iCloud-synced passkeys sɔrɔ ni i ka iPhone tɛ yen, i ka kan ka:
   • (A) I ka taama ka don mobili tabaga ka magan dɔ kɔnɔ fɔlɔ, ka **SIM walima eSIM ** wɛrɛ baara ni i ka telefɔni nimɔrɔ ye iPhone wɛrɛ/juru talen (walima iPad/Mac) kan, ka don i ka Apple Jate kɔnɔ ni SMS kode ye min cilen bɛ o SIM nɔnabila ma, ka i ka iPphone kɔrɔ ka 6-digit lock-screen passcode don walasa ka iCloud Keychain decrypt OR
   • (B) Site web kan i b’a ɲini ka se min ma (i n’a fɔ Amazon, . PayPal, . GitHub, . Best Buy, . eBay, walima Microsoft), "Try another way" / "Sign in another way" / "Gɛlɛya bɛ i bolo doncogo la?" digi Passkey ɲinini jukɔrɔ walasa ka segin ka bin i ka Password + SMS / Email / Backup Code kan.
4. Taama ka don i ka mobili tabaga ka tɔnba dɔ ka feerekɛyɔrɔ dɔ la (Verizon, . AT&T, . T-Mobile, . EE, . Vodafone, . O2, . Rogers, . Bell, . Telstra) n' i ka gɔfɛrɛnaman ka foto ID farikoloma ye walasa ka SIM karti walima eSIM wɛrɛ sɔrɔ FIRST :
5. A bɛ se ka fɔ ko root identity dibaga bɛɛ (Apple iCloud, . Google Account, . Microsoft Account, . Samsung Account) bɛ baara kɛ ni i ka telefɔni selilɛri nimɔrɔ dannamɔgɔ ye i n’a fɔ bootstrap factor fɔlɔ ni minɛn farikoloma bɛɛ tununna. SIM karti farikoloma wɛrɛ sɔrɔli (i bɛ se ka min sɔgɔ ka don telefɔni basigilen dɔ la min ma datugu, n’o ye dɔrɔmɛ 30 ye walima i terikɛ ka telefɔni min bɛ se ka kɛ) bɛ sɛrɛkili dasiri tiɲɛ miniti 10 kɔnɔ, n’i y’a to i ka SMS/kan seginni kode sɔrɔ min ka kan ka don i ka root cloud jatebɔsɛbɛn kɔnɔ.
6. Aw hakili to aw ka telefɔni MISSING ka nimɔrɔ 4 walima nimɔrɔ 6 Lock-Screen Passcode / PIN / Pattern la - o ye cryptographic decryption key ye aw ka syncized passkeys la:
7. U fila bɛɛ Apple (iCloud Keychain Escrow) ani Google (Google Password Manager End-to-End Encryption) i ka tɛmɛsira sinsinnanw siri sankaba kɔnɔ walasa Apple walima Google si kana se k’u kalan. Ni i donna telefɔni kura kɔnɔ minɛn kɔrɔw bɛɛ bɔnɛnen kɔfɛ, Apple walima Google bɛna ɲininkali kɛ ko: "I ka [iPhone / Pixel / Galaxy] tununnen ka tɛmɛsira kɔrɔlen / ekran dakun PIN don walasa k'i ka tɔgɔlasɛbɛnw ni tɛmɛsira maralenw lasegin." Kana i kana jateminɛ kɛ ni kɔnɔnafili ye: a ka c’a la, i bɛ 10 ɲini ka kɔn Hardware Security Module ɲɛ (HSM) escrow vault bɛ a yɛrɛ tiɲɛ kudayi walasa ka brute-forcing bali.
8. A lajɛ ni tablɛti kɔrɔ dɔ, telefɔni kɔrɔ dɔ min bɛ bɔ fɛnmarayɔrɔ la, baarakɛyɔrɔ ɔridinatɛri, walima denbaya kɔnɔmɔgɔ dɔ ka navigatɛri kɔnɔ, doncogo bɛ baara la hali bi:
9. Sani i ka tile 3 fo tile 14 kɔnɔna na, jatebɔsɛbɛnw seginni otomatiki dɔ daminɛ dɔɔnin dɔɔnin (iforgot.apple.com walima accounts.google.com/signin/recovery), ka iPad kɔrɔ bɛɛ lajɛ, Android telefɔni kɔrɔ bɛɛ lajɛ tabali kɔnɔ, so tabali PC kɔnɔ, walima Chrome/Edge profil kɔnɔ baarakɛyɔrɔ la. Ni hali minɛn kelen donna hali bi i ka Apple, Google, Microsoft, walima 1Password jatebɔsɛbɛn kɔnɔ, i bɛ se ka sɔn minɛn kura doncogo ma segin 5 kɔnɔ k’a sɔrɔ i ma tile makɔnɔ.
10. Ni i ka iPhone walima Android sonyalen don (a ma tunun tasuma la), taamasiyɛn kɛ a kan ko "Tunna" (Lost Mode), AW KAN'a "Bɔ ka bɔ jatebɔsɛbɛn kɔnɔ" digi abada:
11. At icloud.com/find (min bɛ baara kɛ ni 2FA tɛ dɔrɔn walasa ka minɛn dɔ taamasiyɛn ko Lost) walima google.com/android/find, Lost Mode / Lock Device daminɛ walasa sonyalikɛla kana se ka baara kɛ ni i ka tɛmɛsira ye. I KAN'a "Remove This Device" digi i ka jatebɔsɛbɛn kɔnɔ k'a sɔrɔ a bɛ sonyalikɛla bolo, bawo n'i y'a bɔ, o bɛ Activation Lock (Find My), k’a to sonyalikɛla ka telefɔni ko k’a feere kokura.
12. Ni i sera i ka root account kɔnɔ kokura, i ka Device-Bound Passkeys (Windows Hello, . Mac Touch ID, walima a tununna YubiKeys) min maralen bɛ fɛnɲɛnamafagalan tununnenw kan :
13. Hali ni Synced Passkeys lakananen don i ka sankaba jatebɔsɛbɛn fɛ ani i ka lock screen fɛ, Device-Bound Passkeys bɛ balo ɔridinatɛri sonyalen kɔnɔ TPM 2.0 chip walima sonyalen YubiKey. Aw ye taa konte kelen-kelen bɛɛ ta la Security -> Passkeys settings page ani ka tɛmɛsira min tɔgɔ dara ɔridinatɛri sonyalen walima YubiKey tununnen tɔgɔ la, o bɔ yen.

--- .

Desizɔn jiri : ka kari ka bɔ sɛrɛkili passkey lockout la ni minɛnw bɛɛ tununna¶

Aw bɛ tugu nin latigɛ jiri in kɔ ka da aw ka tɛmɛsiraw marayɔrɔ kan (Apple iCloud Keychain, . Google Password Manager, . 1Password / Bitwarden, walima Hardware Security Keys) walasa k' i ka jatew sɔrɔ cogo bɛnnen na :

flowchart TD
    Start["Passkey minɛnw bɛɛ (Telefɔni, Ordinatɛri, walima YubiKey) tununna, u sonyalen don, walima u tiɲɛna"] --> WhereStored{"I ka Passkeys tun maralen bɛ min?"}

    WhereStored -->|"1. Apple iCloud Keychain / Apple ka daɲɛgafew porogaramu (iPhone / iPad / Mac) ."| ApplePath["SEN 1A: Taga Carrier Store la ni Photo ID ye -> SIM / eSIM caman sɔrɔ i ka telefɔni nimɔrɔ la"]

    WhereStored -->|"2. Google Password Manager (Android Telefɔni / Chrome Profil) ."| GooglePath["SEN 1B: SIM caman sɔrɔ walima ka baara kɛ ni Recovery Email ye -> Don Google kɔnɔ Telefɔni caman cili / Chrome kan"]

    WhereStored -->|"3. Mɔgɔ sabanan ka fɛnmarayɔrɔ (1Password, Bitwarden, Dashlane, Proton Pass) ."| VaultPath["SEN 1C: Don Vault kɔnɔ minɛn o minɛn kan ni Master Password + Secret Key / 2FA Recovery Code ye"]

    WhereStored -->|"4. Hardware-Bound Dɔrɔn (YubiKey tununna / Windows Hello Laptop TPM tununna)"| HardwarePath["SEN 1D: Hardware-Bound Passkeys NEVER Sync to the Cloud -> Ka kan ka baara kɛ ni jatebɔsɛbɛn Fallback fɛɛrɛ ye"]

    ApplePath --> BorrowApple{"Yala iPhone, iPad, walima Mac wɛrɛ/jurulen bɛ i bolo sisan wa?"}
    BorrowApple -->|"Ɔwɔ"| DecryptiCloud["Don ni Apple ID Password + SMS ye ka SIM Replacement -> I ka iPhone KƆRƆ ka 6-Digit Lock-Screen Passcode don -> Passkeys Synced bɛɛ Télécharger o yɔrɔnin bɛɛ"]
    BorrowApple -->|"Ayi: Windows / Linux PC dɔrɔn de ka kɛ"| BypassWebAuthn["Laɲini site webw kan, ‘Try Another Way’ digi Passkey Prompt jukɔrɔ -> Baara kɛ ni Password + SMS ye walasa ka SIM falen (walima ka iPhone/iPad kɔrɔlen san/juru ta)"]

    GooglePath --> DecryptGPM["Google ka ɲininkaliw: ‘I ka Android Screen Lock PIN / Pattern kɔrɔ don (walima Google Password Manager PIN 6-Digit)’ -> Passkeys Synced bɛɛ bɛ da wuli o yɔrɔnin bɛɛ"]

    VaultPath --> VaultUnlock["Vault Extension / App bɛ Passkey Synced bɛɛ Télécharger ka Taa Device kura la o yɔrɔnin bɛɛ"]

    HardwarePath --> FallbackAuth["‘Try Another Way’ digi Login Screen kan -> Baara kɛ ni Backup YubiKey ye, Backup Codes 8-digit, Authenticator App, SMS, walima Identity Verification"]

    DecryptiCloud --> AuditRevoke["FINNAN: Ka minɛn sonyalenw ka lajɛw bɔ yen & ka minɛnw sirilenw bɔ yen minnu bɛ minɛnw kan minnu tununna"]
    BypassWebAuthn --> AuditRevoke
    DecryptGPM --> AuditRevoke
    VaultUnlock --> AuditRevoke
    FallbackAuth --> AuditRevoke

--- .

Dakun fɔlɔ: Tɛmɛsira minnu bɛ ɲɔgɔn sɔrɔ (Multi-Device) vs. Passkeys minnu bɛ tali kɛ fɛnɲɛnamafagalanw na (Single-Device) .¶

1 min bɛ ɲagami sɔrɔ minɛnw bɔnɛni kɔrɔtɔlen waati la, o ye k’a dɔn ni tɛmɛsira kɛrɛnkɛrɛnnen dɔ ye Cloud-Synced (Discoverable Multi-Device Credential) walima Mɛn-minɛnw sirilen (Single-Device Credential). Aw ye nin tabali in lajɛ walasa k’a dɔn o yɔrɔnin bɛɛ la, tɛmɛsira minnu bɛna bɔ kokura u yɛrɛma n’i y’i ka sankaba marayɔrɔ sɔrɔ ani minnu sara ni fɛnɲɛnamafagalan tununnenw ye:¶

--- .

Dakun 2nan: Segin-ka-bɔnye senfɛ-senfɛ ni i ka iPhone (ani Mac/iPad) bɛɛ tununna walima ni u sonyalen don¶

A ka kɛ ko i ka iPhone ni MacBook fila bɛɛ sonyalen don lotɛli so dɔ kɔnɔ (walima u tiɲɛna tasuma fɛ), wa i b’a ɲini ka don siti o siti kan, o b’a ɲini i fɛ i ka "I ka don ni tɛmɛsira ye ka bɔ i ka iPhone la." I ka tugu nin ɲɔgɔndan tigitigi in kɔ walasa ka fɛn tiɲɛ:

1: I ka telefɔni selilɛri nimɔrɔ segin SIM walima eSIM wɛrɛ kan¶

Mun na i ka telefɔni nimɔrɔ ye Apple Account seginni kunba ye? Sabula tuma min na i ka Apple "Trusted Devices" (iPhone, . iPad, . Mac) tɛ yen, Apple ka fɛn fila dantigɛli-sɛbɛn bɛ segin a yɛrɛma ka SMS nimɔrɔ 6 walima kumakan weleli otomatiki ci i ka telefɔni nimɔrɔ dannamɔgɔ la. 1. Aw bɛ taama ka don feerekɛyɔrɔ ofisiyali dɔ kɔnɔ aw ka telefɔni selilɛri tabaga kama (Verizon, . AT&T, . T-Mobile, . Vodafone, . EE, . Rogers, . Telstra, wdfl) ni i ka Passport walima Driver's License ye. 2. A ɲini ciden fɛ a ka telefɔni sonyalen ka SIM/eSIM (IMEI blacklist ni sonyalen don) ani ka SIM karti farikoloma wɛrɛ di (walima ka eSIM baara telefɔni wɛrɛ kan). 3. O SIM karti min bɛna bila a nɔ na, ​​o bila telefɔni baarakɛta o telefɔni na (hali telefɔni flip $20 walima smartfon jurulen) walasa i ka se ka SMS sɛbɛnw sɔrɔ minnu bɛ na ani telefɔni weleli minnu kɛra i ka nimɔrɔ la.

2nan: I ka don i ka Apple jatebɔsɛbɛn kɔnɔ ka Decrypt iCloud Keychain¶

Ni i sera ka SMS sɛbɛnw sɔrɔ i ka telefɔni nimɔrɔ la, sira fila bɛ i bolo ka kɛɲɛ ni i bɛ se ka don Apple minɛn dɔ la:

Sira A: I ye iPhone, iPad walima Mac wɛrɛ san, ka juru ta, walima i ye a nɔnabila¶

1. Minɛnw sigili waati (walima in Settings -> Sign in to your iPhone), i ka Apple Account email ni password don.
2. Ni a ɲinina i fɛ i ka sɛgɛsɛgɛli kode nimɔrɔ 6 "ci i ka minɛn tɔw ma," i bolo digi "I ma sɛgɛsɛgɛli kode sɔrɔ wa?" -> "Sɛbɛnni kode ka [i ka telefɔni nimɔrɔ]".
3. SMS kode 6 min sɔrɔla i ka SIM nɔnabila kan, o sɛbɛn.
4. A ka Crucial iCloud Keychain Escrow Laɲini: O kɔfɛ, iOS/macOS bɛna ɲininkali kɛ ko: "I ka iPhone tɔ '[Tɔgɔ ka iPhone]' ka tɛmɛsira don. I ka tɛmɛsira sirilen don, wa Apple tɛ se ka kalan. A bɛ kɛ ka se ka i ka tɔgɔlasɛbɛn maralenw ni kunnafoni nafama wɛrɛw sɔrɔ iCloud kɔnɔ."
5. I ye ni nimɔrɔ 4 walima nimɔrɔ 6 lock-screen passcode tigitigi sɛbɛn i ye min kɛ iPhone tununnen/sonyalen kan.
6. Seginnkanni 30 kɔnɔ, Apple ka fɛnɲɛnamafagalan lakanani modulu (HSM) bɛ i ka tɛmɛsira sɛgɛsɛgɛ, k'i ka iCloud Keychain decryption key, ani a bɛ i ka Passkeys, Passwords ani 2FA Verification Codes minnu bɛ a kɔnɔ maralenw kɛmɛsarada la 100 telesarse ka don Passwords app min bɛ Apple minɛn kura kan. Aw kɛnɛyara pewu.

Sira B: Apple minɛn t’i bolo sisan (Windows walima Linux PC walima Android telefɔni dɔrɔn de b’i bolo)¶

Ni i bɛ taa jamana wɛrɛ la, n’i ka iPhone sonyalen don, ani n’i ye Windows ɔridinatɛri walima Android telefɔni dɔrɔn de sɔrɔ do? 1. Dan faamuya: I tɛ se ka natively sync i ka dafalen iCloud Keychain passkey vault ka don Android telefɔni walima Linux PC kan ni Apple minɛn tɛ. 2. I bɛ se ka don i ka jatew kɔnɔ cogo min (Google, . Amazon, . PayPal, . GitHub, . Bank) ka bɔ Windows/Android la sisan yɛrɛ ni i ka iPhone tɛmɛsira tɛ: - A bɛ se ka fɔ ko mɔgɔw ka siti si tɛ i ka tɔgɔlasɛbɛn walima i ka fallback fɛɛrɛw bɔ yen n’i ye tɛmɛsira dɔ da. - Ni siti in bɔra Windows Security / QR code dialogue kɔnɔ min b’a ɲini i fɛ i ka "Baara kɛ ni tɛmɛsira ye ka bɔ iPhone walima iPad la," click Cancel Windows popup kan, o kɔfɛ, i ka ɛntɛrinɛti yɔrɔ doncogo sɛbɛn lajɛ k’a digi "A ɲini cogo wɛrɛ la" / "Sign in another way" / "Use password instead". - I ka jatebɔsɛbɛn tɔgɔ sɛbɛn (walima i ka "I ɲinɛna tɔgɔlasɛbɛn kɔ?" digi walasa k’a lasegin a cogo kɔrɔ la imɛri/SMS fɛ), ani ni a ɲinina i fɛ 2FA fɛ, i ka SMS Text / Voice Call (min bɛ se i ka SIM karti falen kan) walima Email verification sugandi.

3nan: N’i fana ɲinɛna i ka Apple Account tɔgɔlasɛbɛn kɔ WALIMA i ka telefɔni nimɔrɔ tununna (iforgot.apple.com) ?¶

• Ni i ye Apple "Account Recovery Contact" dɔ labɛn ka kɔn (Settings -> Sign-In & Security -> Account Recovery): Aw bɛ aw ka denbaya kɔnɔmɔgɔ walima aw teri wele min ye aw ka Recovery Contact ye. Aw k’a to u ka da wuli Settings -> [Their Name] -> Sign-In & Security -> Account Recovery -> [Your Name] -> Get Recovery Code u ka iPhone kan ani ka 6-digit Recovery Code kalan i ye. O kode sɛbɛn i ka minɛn kura kɔnɔ walasa ka makɔnɔni waati tɛmɛ ani ka se ka don o yɔrɔnin bɛɛ la kokura.
• Ni i ma Recovery Contact sigi: Taga ** la .https://iforgot.apple.com** ka daminɛ Jatebɔsɛbɛn seginni otomatiki. I bɛ karti nimɔrɔ walima telefɔni nimɔrɔ kunnafoni fɛn o fɛn dɔn, i kɛlen kɔ k’o sɛgɛsɛgɛ, Apple bɛ lakana makɔnɔni waati wajibiyalen otomatiki (a ka c’a la sanga 24 fo tile 14) daminɛ.
• KƆLƆSI KƆRƆBƆLI MIN BƐ SƆRƆ iforgot.apple.com ƝƐNABƆLI WAATI: Ni minɛn dɔ b’i bolo hali bi, Apple Jatebɔsɛbɛn tununnen bɛ se ka ɲɔgɔn sɔrɔ yɔrɔ min na waati dɔɔnin kɔnɔ, a faga, ani i kana segin ka ɲinini kuraw bila a kan iforgot.apple.com, i n’a fɔ sɛbɛn in daminɛni kokura bɛ jatebɔ waati segin ka segin Tile 1. I ka jatebɔ cogoya lajɛ yɔrɔ la iforgot.apple.com.

--- .

Fase 3: Segin-ka-bɔnye senfɛ-senfɛ ni i ka Android telefɔni (Google Password Manager) A tununna walima a sonyalen don¶

Ni i ka tɛmɛsiraw maralen tun bɛ Google Password Manager kɔnɔ Android telefɔni tununnen walima a tiɲɛnen kan (Google Pixel, . Samsung Galaxy, . Motorola, . OnePlus), Google ka kɔsa in na fɛn dilannenw bɛ cross-platform recovery nɔgɔya kosɛbɛ ka tɛmɛ a tun bɛ cogo min na fɔlɔ:

1: I ka segin ka don i ka Google jatebɔsɛbɛn kɔnɔ telefɔni walima Chrome Browser wɛrɛ kan¶

1. Android telefɔni wɛrɛ kan (walima Google Chrome kɔnɔ Windows, Mac walima Linux ɔridinatɛri o ɔridinatɛri kan), taa accounts.google.com.
2. Ni Google y'a ɲini i fɛ ko "I ka baara kɛ ni i ka tɛmɛsira ye walasa k'a jira ko i yɛrɛ don tiɲɛ na" (ka ɲɛsin i ka Android telefɔni tununnen ma), i kana Tɛmɛsira digi tɛmɛsira ɲinini kan. O nɔ na, i ka ** digi ."Try another way"** donna karti duguma-numan fɛ.
3. I ka fallback authentication sugandiliw dɔ sugandi:
4. Aw ye sɛgɛsɛgɛli kode sɔrɔ yɔrɔ la [Your Phone Number] (ka baara kɛ ni i ka SIM karti falen ye min bɛ bɔ carrier magasin na), OR
5. I ka Backup Codes 8-digit dɔ don, OR
6. Aw ye sɛgɛsɛgɛli kode sɔrɔ aw ka Recovery Email ladɛrɛsi la (recovery-email@example.com), OR
7. I ka Google Account Password sɛbɛn.

2nan : Google Password Manager ka Passkey Vault sirilen laban-ka-ban da wuli¶

Ni i donna i ka Google Jatebɔsɛbɛn kɔnɔ Android telefɔni kura kan walima Google Chrome tabali kɔnɔ (chrome://password-manager/passwords): . 1. A ɲini ka baara kɛ ni tɛmɛsira kɔrɔsilen fɛn o fɛn ye min maralen bɛ, i k’o lajɛ walima k’a lajɛ. 2. Google bɛna lakana ɲinini dɔ jira: "Walisa ka baara kɛ ni i ka tɛmɛsira ye nin minɛn in kan, i k'a sɛgɛsɛgɛ ko i don. I ka Google Password Manager PIN (walima i ka [Pixel / Galaxy] minɛn kɔrɔ ka ɛkran dakun) don." 3. Aw bɛ either don: - Google Password Manager PIN min ye nimɔrɔ 6 ye, i ye min dabɔ tuma min na i ye tabali tɛmɛsira sinsinni sigi sen kan fɔlɔ, OR - **I ka Android telefɔni tununnen ka Ecran Lock PIN, Pattern, walima Password tigitigi. 4. I donna o PIN/Pattern kɔnɔ waati min na, Google ka zeru-knowledge Titan cloud vault b’i ka passkeys decrypte sigida la minɛn kura in kan - hali n’i bɛ Windows walima Mac ɔridinatɛri kan min bɛ Chrome baara.

--- .

Fase 4: Cogo min na ka bɔ site web kelen-kelen bɛɛ ka Passkey Loops (Amazon, . GitHub, . Microsoft, . PayPal, . Coinbase, . Sony) .¶

Siti caman y'u ka "Passwordless / Passkey" dondaw dilan cogo jugu la: n'i y'i ka imeyilɛri sɛbɛn dɔrɔn, siti in bɛ navigatɔrɔn ta tasuma Bɔ a yɛrɛma navigator.credentials.get() WebAutn API, ka modal operating-system box dɔ bɔ kɛnɛ kan min bɛ telefɔni bulutu walima USB lakanani kilisi ɲini sanni i yɛrɛ ka tɔgɔlasɛbɛn foro dɔ ye.

Nin ye fɛɛrɛ tigitigi ye min bɛ se ka WebAuthn modal otomatiki tɛmɛn site web o site web kan:

1. Aw ka digi Escape (Esc) walima a digi Cancel kan Operating System / Browser Passkey Popup FƆLƆ:
2. Aw kana aw kana navigatɔrɔn tab datugu. Ni Windows Security, macOS, Chrome, walima Safari ye sistɛmu dialogue bɔ kɛnɛ kan k'a fɔ ko "I ka security key don" walima "Scan this QR code with your phone," ** digiCancel** o popup kɔnɔ.
3. Ni navigatɛri ka navigator.credentials.get() layidu bɛ segin NotAllowedError (baarakɛla ka cancel), site web minnu sɛbɛnnen don koɲuman (Google, . Microsoft, . GitHub, . PayPal, . Amazon, . Shopify, . Kayak, . eBay) o fili in minɛ o yɔrɔnin bɛɛ ka jɛgɛn dogolen jira : ** ."Sign in another way"**, "Use your password instead", walima "Send a code to my email/phone".
4. Site web Kɛrɛnkɛrɛnnenw Boli Hatches:
5. Microsoft ka jatebɔsɛbɛn (live.com / . outlook.com / . xbox.com): A digi Cancel tɛmɛsira ɲinini kan -> ** digi .Other ways to sign in** -> Ka baara kɛ ni ne ka tɔgɔlasɛbɛn ye sugandi, Ka kode ci ne ka segin-ka-bɔnye email ma, walima Ka segin-ka-bɔnye kode sɛbɛn min bɛ ni sɛbɛnni 25 ye. (A jira: Yala i ye Microsoft ka "Passwordless Account" toggle daminɛ k'a jɛya i ka password bɔra yɔrɔ min na pewu i ka account kɔnɔ wa? Hali Microsoft Account Passwordless kan, i ye ** digiOther ways to sign in** b’a to i ka se ka dantigɛli kɛ i ka Microsoft Authenticator sankaba kɔkanna, Recovery Email, SMS, walima 25-character Recovery Code fɛ.)
6. GitHub ( Bamako)github.com/login): "Sign in with a passkey" butɔn jukɔrɔ, i ka baarakɛla tɔgɔ ni i ka tɔgɔlasɛbɛn sɛbɛn sanfɛ, walima ni i ye 2FA/WebAuthn ɲini i ka tɔgɔlasɛbɛn sɛbɛnni kɔfɛ, i bɛ ** digiMore options -> Use your authenticator app walima Enter a recovery code**.
7. Coinbase / Kraken / Binance (Ni tɛmɛsira ni YubiKeys bɛɛ tununna): Cryptocurrency exchanges réguliées tɛ t sira di SMS fallback lakananbali ma ni i ye passkey walima YubiKey tɔgɔ sɛbɛn. Aw ye ** digi .Try another way -> I lost my passkey / security key** ka fɛnw falen-falen in ka otomatiki ID + Live Video Selfie Biometric Verification (2FA Reset), min bɛ i ka tɛmɛsira tununnen bila a nɔ na, lakana nɛnɛ wajibiyalen kɔfɛ sanga 24 fo sanga 48 kɔnɔ.
8. Discord: Ni i ye Passkey / Security Key MFA daminɛ Discord kan ani i ye i ka telefɔni/YubiKey tunun, i bɛ ** digi .Authenticate with a backup code** (kode ye nimɔrɔ 8 ye ka bɔ... discord_backup_codes.txt), walima ni SMS Fallback tun bɛ i bolo hali bi Discord kɔnɔ, i ka ** digi .Receive a code via SMS**.

--- .

Fase 5: "Fireproof & Theft-Proof" Passkey Architecture jɔli (Walisa i kana se ka datugu tugun abada)¶

Ni aw ye aw ka jatew sɔrɔ kokura, aw bɛ miniti 20 kɛ ka nin 3-pillar passkey redundancy rule labɛn min laadilen don FIDO Alliance ni NIST fɛ:

• Sariya 1 - Aw kana aw jigi da ekosisɛti kelen ka tɛmɛsira marayɔrɔ kan abada ; ka cross-platform passkey dɔ mara 1Password walima Bitwarden (walima ka sankaba suguya 2 sɛbɛn): Aw ka 5 jatew kan minnu ka jugu kosɛbɛ (Google, . Apple, . Microsoft, . Password Manager, . Primary Bank), i tɔgɔ sɛbɛn a dɔgɔyalenba la, tɛmɛsira fila ka bɔ dilanbaga wɛrɛw la - misali la, tɛmɛsira kelen bɛ Apple Passwords / Google Password Manager kɔnɔ ANI tɛmɛsira filanan kɔfɛ Bitwarden / 1Password kɔnɔ (walima YubiKey farikoloma kan).
• Sariyasen 2nan - Ka farikolo-ɲɛnajɛ-minɛnw lakanani kilisi FILA tɔgɔ sɛbɛn (YubiKey 5 NFC / . Token2), ani ka backup key to yɔrɔ wɛrɛ la: Aw bɛ fila san \(25-\)55 FIDO2 lakanani konnɛgɛw. I ka fila bɛɛ kilisi sɛbɛn i ka Google Jatebɔsɛbɛn kan, Apple Jatebɔsɛbɛn (min bɛ fɛnɲɛnamafagalan 2 de wajibiya ni a dabɔra), Microsoft Jatebɔsɛbɛn, ani Password Manager. Aw bɛ Kilisi #1 mara aw ka kilisi kan ani ka Kilisi #2 datugu so tasuma tɛ min na walima aw somɔgɔ dɔ ka so, aw dalen bɛ min na. Hali n’i ka telefɔni ni i ka ɔridinatɛri jeni tasuma na, n’i ye Key #2 don gafemarayɔrɔ walima ɔridinatɛri wɛrɛ la, o b’i don i ka nizɛri ɲɛnamaya bɛɛ kɔnɔ segin 3 kɔnɔ.
• Sariyasen 3nan - Apple "Account Recovery Contact" (iOS) ani Google "Segin-ka-bɔnye / Segin-ka-bɔnye Email":
• Iphone kan: Settings -> [Your Name] -> Sign-In & Security -> Account Recovery -> Add Recovery Contact (aw bɛ furuɲɔgɔn, bangebaga, balimakɛ, walima teri dannamɔgɔ dɔ sugandi min bɛ baara kɛ ni iPhone ye).
• Google kan: Taama myaccount.google.com/security ani k’a lajɛ ko Recovery Phone ani external Recovery Email (min tɛ Gmail jatebɔsɛbɛn kelen kan - misali la, ProtonMail walima Outlook ladɛrɛsi) fila bɛɛ bɛ baara la, ani k’i ka Google Backup Codes 10 minnu bɛ baara kɛ siɲɛ kelen, nizɛri 8 ye sɛbɛn papiye kan.
• Sariyasen 4nan - Aw bɛ aw ka kɔrɔtɔko kɛnɛyasɛbɛn sɛbɛn papiye farikoloma kan k’a mara ni aw ka Pasipɔri / Bangesɛbɛn ye: Sɛbɛnni kɛ index karti farikoloma kelen kan min maralen bɛ i ka safe kɔnɔ: (1) I ka Apple/Google Account Email & Password, (2) I ka Telefɔni Lock-Screen Passcode / Google Password Manager 6-Digit PIN, (3) I ka Password Manager Master Password + Secret Key, ani (4) I ka 8-digit / 25-character Backup Recovery Codes.

--- .

Sigidaw ka kɔrɔtɔko nimɔrɔw ani baaradaw ka sariyaw¶

Ni i ka tɛmɛsira minɛnw tununna sonyali, binkanni, walima farikolo balawu kosɔn, i ka jɛkafɔ kɛ ni polisiw ye, i ka telefɔni selilɛriw tabaga ani mɔgɔw lakanani baaradaw:

• Amerika ni Kanada: Dial 911 ni i ka telefɔni ni ɔridinatɛri minɛna binkanni na, i ka Polisiw ka kunnafoni nimɔrɔ sɔrɔ, i k’a ɲini i ka tabaga fɛ a ka sonyalenw bila IMEI kan GSMA Stolen Device Blocklist kan k’a sɔrɔ a bɛ SIM wɛrɛ bɔ, ani ka tɛmɛsira sonyali jagoyalenw fɔ FBI IC3 (ic3.gov).
• Royaume-Uni: Dial 999 ka ɲɛsin binkanni walekɛlen dɔ ma walima ** .101** ka Polisiw ka kojugubakɛlaw ka ɲɛfɔli nimɔrɔ dɔ sɔrɔ, ani ka IMEI sonyalenw fɔ ani ka jatebɔsɛbɛnw sɔrɔli fɔ Action Fraud (0300 123 2040 / . actionfraud.police.uk).
• Erɔpu jamanaw ka tɔnba: Dial 112 UE jamanaw bɛɛ kɔnɔ ani ka sonyali sɛbɛn sɛbɛn di sigida polisiw ma walasa ka minɛn in tɔgɔ sɛbɛn nɛrɛmuguma kɔnɔ IMEI.
• Ɔsitarali ni Zelande kura: Dial 000 Ɔsitarali jamana na walima 111 Nuwɛlika jamana na, aw bɛ a ɲini aw ka telefɔni tabaga fɛ a ka telefɔni sonyalenw ta bali IMEI ka tɛmɛn rezo bɛɛ kan, ani ka kuma IDCARE (1800 595 160).
• Endi ni Azi Pasifiki: Dial 112, ka SIM karti fila sɔrɔ, ka telefɔni sonyalen ta bali IMEI jamana fan bɛɛ la ceir.gov.in (14422).

--- .

Ɲininkali minnu bɛ kɛ tuma caman na¶

Ni son dɔ ye n ka iPhone walima Android telefɔni sonya, yala u bɛ se ka baara kɛ ni n ka Passkeys ye walasa ka don n ka banki, Google walima crypto jatew kɔnɔ wa?¶

Ayi, a tɛ kɛ fo n’u fana b’i ka lock-screen passcode dɔn walima n’u y’i ka biometriki wajibiya (`Face ID` / . `Fingerprint`). FIDO2 / WebAutn tɛmɛsira bɛɛ bɛ wajibiya Baarakɛlaw ka sɛgɛsɛgɛli (`UV`) . sanni telefɔni ka fɛnɲɛnamafagalan lakanani puce ka bolonɔ bila donko gɛlɛya la. Hali ni son y’i ka telefɔni minɛ k’a sɔrɔ a ma da wuli, n’i donna siti walima porogaramu dɔ kɔnɔ ni tɛmɛsira ye, o bɛ fɛn kura dɔ daminɛ Face ID, Touch ID, walima bolokɔniw sɛgɛsɛgɛli. Walasa ka sonw dabila minnu bɛ i ka PIN sɛbɛn, i ka se ka baara kɛ Apple Sonya minɛnw lakanani (`Settings > Face ID & Passcode > Stolen Device Protection`) ani Android Sonyali dɔnni dakun / Identité Check (`Settings > Google > All services > Theft protection`), minnu bɛ biometriki dɔrɔn dantigɛli wajibiya ka yɔrɔ jan so.

Mun na siti in y’a ɲini n fɛ n ka QR code dɔ skan ni n ka telefɔni ye tuma min na n ye "Sign in with a passkey" digi n ka Windows PC kan - hali ni n ma deli ka passekey sɔrɔ n ka Windows PC kan?¶

Tuma min na i ye o siti in ka tɛmɛsira dɔ Dabɔ i ka telefɔni na, o siti in ye darapo dɔ mara k’a hakili To a la ko mobili tɛmɛsira dɔ b’i bolo. Ni i donna ka bɔ tabali navigatɔrɔ dɔ la min tɛ o sigida tɛmɛsira sɔrɔ, navigatɔrɔ bɛ daminɛ FIDO ka fɛnw sɛgɛsɛgɛli (`Hybrid Transport` / . `caBLE`) ., ka QR code jira walasa i ka telefɔni ka se ka bolonɔ bila don na bulutu fɛ. Ni i ka telefɔni tununna, i ka digi Cancel (Kalan) kɛ QR code finɛtiri kan ka digi "A ɲini cogo wɛrɛ la" / "I don ni tɔgɔlasɛbɛn ye". ɛntɛrinɛti yɔrɔ la min bɛ a jukɔrɔ.

Ni n ye passkey dɔ bɔ n ka Apple Passwords app walima Google Password Manager, yala o bɛ tɛmɛsira bɔ a yɛrɛma ka bɔ siti in ka sèrwɛri fana na wa ?¶

A ka c’a la, ayi. Fo ni siti in ni tɔgɔlasɛbɛn ɲɛmɔgɔ fila bɛɛ bɛ WebAutn Signal API dɛmɛ, ka tɛmɛsira dɔ bɔ i ka tɔgɔlasɛbɛn ɲɛnabɔbaga kɔnɔ, o bɛ... mɔgɔ kelen-kelen bɛɛ ka kilisi ka bɔ i ka vault kɔnɔ ka sɔrɔ site web in bɛ hali bi ka foroba kilisi ani a bɛ to ka dusu don a kɔnɔ. Tuma o tuma n’i bɔnɛna minɛn sirilen tɛmɛsira la (i n’a fɔ ɔridinatɛri karilen walima YubiKey tununna), i ka don siti in ta kɔnɔ Jateblaw labɛncogo > Lakanali > Tɛmɛsira ɲɛ ani ka tɛmɛsira tununnen donta bɔ yen fana.

Yala ne bɛ se ka n ka Passkeyw bɛɛ bila ka taa walima k’u bila iPhone kɔnɔ (iCloud Keychain) ka taa Android telefɔni na (Google Password Manager) walima 1Password / . Bitwarden?¶

Passkeys tɛ se ka bila ka taa yɔrɔ la min ma siri `.csv` jatebɔsɛbɛn (spreadsheet) bawo sɛbɛnni jɛlenw bɔli bɛna kɛ sababu ye ka mɔgɔ kelen-kelen bɛɛ ka kilisi bɔ porogaramu juguw la. Nka, k’a daminɛ san iOS 18.2+ ani Android 15+, Apple, Google, 1Password, ani Bitwarden bɛ dɛmɛ don FIDO ka jɛkuluba `Credential Exchange Protocol (CXP)` (`Settings > Apps > Passwords > Export / Import`) ka ɲɛsin fɛnw cili ma ni kodɔn ye. Minɛn kɔrɔw kan, i ka don i ka siti sanfɛyɔrɔw la minɛn kura kan ani i ka digi "A' ye tɛmɛsira kura fara a kan". ka tɛmɛsira filanan sɛbɛn ka ɲɛsin i ka vault kura ma.

Mun bɛ kɛ ne ka tɛmɛsira la ni ne ye n ka iPhone Lock-Screen Passcode walima n ka Android Screen Lock PIN Changer?¶

I ka tɛmɛsira-minɛnw bɛ to lakana la kɛmɛsarada la, wa u bɛ u yɛrɛma k’u ka sankaba-kɔnɔ-fɛnw sirili kilisi siri kokura i ka tɛmɛsira walima i ka PIN kura la. I ka PIN min bɛ yen sisan ani i ka PIN min tun bɛ yen o yɔrɔnin bɛɛ, o fila bɛɛ lajɛ fo minɛnw bɛɛ ka ɲɔgɔn sɔrɔ ka ban.

Yala ne ka kan ka tɔgɔlasɛbɛn bɔ ne ka jatew kan ni ne ye Passkey fara a kan siɲɛ kelen wa?¶

Baarakɛla fanba fɛ, . i ka daɲɛ dogolen barikama, min ɲɔgɔn tɛ, n’o ye taamasiyɛn 20 ye, n’o bɛ sɔrɔ k’a sɔrɔ a ma kɛ cogo si la, n’o maralen bɛ i ka tɔgɔlasɛbɛn ɲɛminɛbaga kɔnɔ i ka tɛmɛsira kɔrɔw kɛrɛfɛ, ka fara nimɔrɔ 8 sɛbɛnnenw kan. Ni i ye tɔgɔlasɛbɛn dɔ mara k’a sɔrɔ i ma kɛ cogo si la (walima YubiKey + printed recovery codes backup) o bɛ OS-independent escape hatch di i ma n’i ye i ka telefɔni tunun k’i to taama na ni Windows walima Linux ɔridinatɛri jurulen dɔrɔn ye.

--- .

Gafe minnu bɛ tali kɛ o ko la¶

• MFA lockout ani authenticator seginni
• iPhone Sonya minɛnw lakanani, segin-ka-bɔnye kilisi dabɔli, ani Apple Account legacy contact rescue
• Password manager lockout, master password bɔnɛ, ani vault seginni
• Telefɔni nimɔrɔ min bɛ se ka kɛ fɛn fila ye, o bɛ segin ka kɛ fɛn ye min bɛ se ka baara kɛ ni a ye ani SMS 2FA lockout
• Ordinateur portable walima telefɔni sonyalen: yɔrɔjan wipe ani account lockdown
• Session cookie hijacking, infostealer malware, ani passkey bɔli
• Kɔrɔtɔko nimɔrɔw ka kɛɲɛ ni jamana ye

--- .

Sosow ani ɲɛmɔgɔyaso ka bilasiralikan¶

• FIDO Alliance & Diɲɛ Ɛntɛrinɛti Jɛkulu (W3C): Web Lafasali (WebAuthn Nivo 3) Kɔrɔfɔli, Minɛn caman ka seereyaw (Synced Passkeys) ni Minɛn kelen-kelen (Device-Bound) Sɛbɛnw, ani Sɛbɛnw falenfalen protocol (CXP) ye.
• Jamana ka sariyaw ni seko ni dɔnko baarada (NIST) (Etazuni): Gafe kɛrɛnkɛrɛnnen 800-63B (Seginkanni 4 / Suppl.): Nizɛri danyɔrɔ laadilikanw - Lafasali ni ɲɛnamaya taabolo ɲɛnabɔli (Sincable Authenticators and Account Recovery Flows).
• Apple Platform Lakanali Sɛbɛn ofisiyali: iCloud Keychain Escrow Architecture, Passkeys Synchronization, ani Jateblaw Lasegincogo Lakanali (support.apple.com/en-us/102641) ye.
• Google Lakanali Blog & Android Dabɔbagaw ka sɛbɛnw: Passkey laban-ni-ban Encryption Google Password Manager kɔnɔ (Google Titan Keychain Escrow) ani Cross-Device Passkey Lasegin.
• Jamana ka Sibɛri Lakanali yɔrɔ (NCSC) (Royaume-Uni) & Sibɛri lakanani ni fɛnsɔrɔko lakanani baarada (CISA) (Amerika): MFA bilali ni a seginni ɲɛminɛni min bɛ se ka tɛmɛsira ni Phishing kɛlɛ.