{"id":492,"date":"2015-04-06T16:14:12","date_gmt":"2015-04-06T16:14:12","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=492"},"modified":"2015-04-06T16:14:12","modified_gmt":"2015-04-06T16:14:12","slug":"yahoo-goes-passwordless-to-access-account-services","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/yahoo-goes-passwordless-to-access-account-services\/","title":{"rendered":"Yahoo Goes Passwordless to Access Account Services"},"content":{"rendered":"

\"Yahoo<\/a>Yahoo is rolling out<\/a> “on-demand” email passwords, received via phone notifications, meaning you never have to remember a fixed password ever again, if you so choose. The service is opt in. The question for me though, is as follows: If Yahoo thinks this is good for the consumer, could this be a model for corporate IT security as well?<\/p>\n

Here’s how<\/a> you can opt in if you have a Yahoo email account according to Yahoo’s director of product management, Chris Stoner:<\/p>\n

1)\u00a0\u00a0\u00a0 Sign in to your Yahoo.com account.<\/p>\n

2)\u00a0\u00a0\u00a0 Click on your name at the top right corner to go to your account information page.<\/p>\n

3)\u00a0\u00a0\u00a0 Select \u201cAccount Security\u201d in the left bar.<\/p>\n

4)\u00a0\u00a0\u00a0 Click on the slider for \u201cOn-demand passwords\u201d to opt-in.<\/p>\n

5)\u00a0\u00a0\u00a0 Enter your phone number and Yahoo will send you a verification code.<\/p>\n

6)\u00a0\u00a0\u00a0 Enter the code and voila!<\/p><\/blockquote>\n

Sounds very simple. It also avoids the problems of trying to remember a complicated fixed password, or even worse, having a cybercrook guess your favorite color or best friend’s name and instantly get access to tons of sensitive personal information which they could use to ruin your life.<\/p>\n

Other email providers have offered similar two-step authentication procedures, where you enter a fixed password first, then have a temporary password sent to your phone which you use to gain access to the account. Yahoo’s new system simply skips that first step.<\/p>\n

What seems to be happening here is that Yahoo decided to push Identity and Access Management functions for its users down to the users’ own phones. Anyone who wants to access a Yahoo account that has opted into this feature will need the phone associated with that account. Given how often people lose their mobile devices or have them stolen, this approach may wind up being less than secure, including companies or other organizations looking to secure their networks and people on the cheap. If the mobile devices themselves are not\u00a0 well protected from unauthorized access, and if users are accessing their Yahoo accounts off of their phones, which they probably will, then all cybercrooks have to do is nab a corporate phone, break into it, and then VOILA<\/em>, they are inside. You would then need a real Identity and Access Management solution to stop the attacker in his\/her tracks by detecting the unauthorized access and then either wiping the mobile device or locking it out of the corporate network, if it isn’t already too late. On its own, therefore, Yahoo’s new security procedure for its account holders falls short, especially for larger organizations.<\/p>\n

For Solutions Review’s list of top IAM providers, click here<\/a>. For our 2015 IAM Buyers Guide, click here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

Yahoo is rolling out “on-demand” email passwords, received via phone notifications, meaning you never have to remember a fixed password ever again, if you so choose. The service is opt in. The question for me though, is as follows: If Yahoo thinks this is good for the consumer, could this be a model for corporate […]<\/p>\n","protected":false},"author":1,"featured_media":495,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[6],"tags":[],"acf":[],"yoast_head":"\nYahoo Goes Passwordless to Access Its Account Services<\/title>\n<meta name=\"description\" content=\"The tech giant's move centers on this: You no longer need a password to access your account. Instead, you can opt into this access management solution.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/yahoo-goes-passwordless-to-access-account-services\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Doug Atkinson\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/yahoo-goes-passwordless-to-access-account-services\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/yahoo-goes-passwordless-to-access-account-services\/\",\"name\":\"Yahoo Goes Passwordless to Access Its Account Services\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/yahoo-goes-passwordless-to-access-account-services\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/yahoo-goes-passwordless-to-access-account-services\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2015\/04\/Yahoo-Goes-Passwordless-to-Access-Account-Services.jpg\",\"datePublished\":\"2015-04-06T16:14:12+00:00\",\"dateModified\":\"2015-04-06T16:14:12+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/5992f02d38e7b28251ad933cd131dcae\"},\"description\":\"The tech giant's move centers on this: You no longer need a password to access your account. Instead, you can opt into this access management solution.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/yahoo-goes-passwordless-to-access-account-services\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/yahoo-goes-passwordless-to-access-account-services\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/yahoo-goes-passwordless-to-access-account-services\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2015\/04\/Yahoo-Goes-Passwordless-to-Access-Account-Services.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2015\/04\/Yahoo-Goes-Passwordless-to-Access-Account-Services.jpg\",\"width\":600,\"height\":270,\"caption\":\"Yahoo Goes Passwordless to Access Account Services\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/yahoo-goes-passwordless-to-access-account-services\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Yahoo Goes Passwordless to Access Account Services\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/5992f02d38e7b28251ad933cd131dcae\",\"name\":\"Doug Atkinson\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/092cfcbe5c7f2c185c21f152aada2d2f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/092cfcbe5c7f2c185c21f152aada2d2f?s=96&d=mm&r=g\",\"caption\":\"Doug Atkinson\"},\"description\":\"An entrepreneur and executive with a passion for enterprise technology, Doug founded Solutions Review in 2012. He has previously served as a newspaper boy, a McDonald's grill cook, a bartender, a political consultant, a web developer, the VP of Sales for e-Dialog - a digital marketing agency - and as Special Assistant to Governor William Weld of Massachusetts.\",\"sameAs\":[\"https:\/\/solutionsreview.com\"],\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/doug-atkinson-4\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Yahoo Goes Passwordless to Access Its Account Services","description":"The tech giant's move centers on this: You no longer need a password to access your account. Instead, you can opt into this access management solution.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/yahoo-goes-passwordless-to-access-account-services\/","twitter_misc":{"Written by":"Doug Atkinson","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/yahoo-goes-passwordless-to-access-account-services\/","url":"https:\/\/solutionsreview.com\/identity-management\/yahoo-goes-passwordless-to-access-account-services\/","name":"Yahoo Goes Passwordless to Access Its Account Services","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/yahoo-goes-passwordless-to-access-account-services\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/yahoo-goes-passwordless-to-access-account-services\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2015\/04\/Yahoo-Goes-Passwordless-to-Access-Account-Services.jpg","datePublished":"2015-04-06T16:14:12+00:00","dateModified":"2015-04-06T16:14:12+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/5992f02d38e7b28251ad933cd131dcae"},"description":"The tech giant's move centers on this: You no longer need a password to access your account. Instead, you can opt into this access management solution.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/yahoo-goes-passwordless-to-access-account-services\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/yahoo-goes-passwordless-to-access-account-services\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/yahoo-goes-passwordless-to-access-account-services\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2015\/04\/Yahoo-Goes-Passwordless-to-Access-Account-Services.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2015\/04\/Yahoo-Goes-Passwordless-to-Access-Account-Services.jpg","width":600,"height":270,"caption":"Yahoo Goes Passwordless to Access Account Services"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/yahoo-goes-passwordless-to-access-account-services\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Yahoo Goes Passwordless to Access Account Services"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/5992f02d38e7b28251ad933cd131dcae","name":"Doug Atkinson","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/092cfcbe5c7f2c185c21f152aada2d2f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/092cfcbe5c7f2c185c21f152aada2d2f?s=96&d=mm&r=g","caption":"Doug Atkinson"},"description":"An entrepreneur and executive with a passion for enterprise technology, Doug founded Solutions Review in 2012. He has previously served as a newspaper boy, a McDonald's grill cook, a bartender, a political consultant, a web developer, the VP of Sales for e-Dialog - a digital marketing agency - and as Special Assistant to Governor William Weld of Massachusetts.","sameAs":["https:\/\/solutionsreview.com"],"url":"https:\/\/solutionsreview.com\/identity-management\/author\/doug-atkinson-4\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/492"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=492"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/492\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/495"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=492"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=492"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=492"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}