theregister : Google password fill effort could kill Android malware's best tricks • The Register

Google password fill effort could kill Android malware's best tricks • The Register

Google may be paving the way to kill one of the few remaining avenues to compromise modern Android handsets in its bid to improve password security with a new open source API.The feature, dubbed OpenYOLO (You Only Log In Once), will allow users to permanently log into all apps by entering their password manager credentials once.Users who have turned up security settings must log into their password managers each time to access applications in what is a minor inconvenience.

Dashlane, Google launch 'OpenYOLO,' an API-based password project for Android apps

Password management is one of the key defenses — or key weaknesses — when it comes to protecting your data and identity online, and today Dashlane — the digital wallet and password manager startup — announced that it has teamed up with Google to develop another route to trying to fix that.The two have unveiled OpenYOLO — not this YOLO, but short for "you only login once" — an open-source API project for app developers to access passwords stored in password managers, whichever one you happen to use.OpenYOLO will first target apps built for Android, but the hope is to include other platforms over time, "universal implementation by various apps and password managers across all platforms and operating systems," Dashlane said in a separate release.

​Google wants you to log in once on Android - with any password manager

Image: GoogleGoogle is developing an open-source API to ease the hassle of logging-in to apps, particularly for those who use unique passwords for each of their accounts.​Poacher turned gamekeeper?GCHQ issues advice on safer passwords UK surveillance and intelligence agency GCHQ has come up with a list of best practice advice on the use of passwords.