Apple believes that many people choose “either not to use a password at all or to use a trivial password” because they worry about losing access to the computer if they forget their password. And that’s a problem.
The New Scientist has uncovered a new patent from Apple that shows how a power cable could help users access their computing devices when they forget their passwords – and perhaps improve security.
Specifically, the patent aims to stop thieves of laptops, iPads and iPhones gaining unauthorised access to the portable computing devices.
The patent notes that although such devices are commonly stolen, thieves rarely also steal cables. Apple’s idea is that a memory chip on your power charger could store information about your password – such as, for instance, an encrypted version of your password reminder hint.
That way, if you’ve forgotten your password you could just plug your laptop into the wall, to receive the secret password hint.
Security is boosted further by another idea in the patent, which would require authentication from a network server before the password hint is served up. I can imagine, for instance, that the network server segment of the password reminder might only be delivered if the user has instructed Apple (perhaps via their Apple ID?) that they are attempting to recover their computer’s password – something you wouldn’t do if the device were in the hands of a thief.
What impressed me a little less were some of the other scenarios Apple describes in its patent. For instance, they detail how the technology could be used not just to provide a password reminder hint but to actually recover the password itself.
That could make it child’s play for someone sharing your house, or with access to your office, to break into your plugged-in laptop and cause mischief. No password guessing required!
Presumably Apple has included these less secure implementation methods to widen the scope of their patent, rather than because they think they are particularly sensible without additional authentication.
The patent goes into much more detail - explaining, for instance, that password information could be stored not just on power cables, but any type of peripheral device associated with the computer – your printer, an external monitor or a wireless router, for instance.
Whether we’ll ever see Apple incorporating this technology into their products remains to be seen. But as battery performance improves in computing devices, there might be an increased attractiveness in needing more than the laptop, smartphone or iPad itself to be reminded of your password hint.
As Apple says, “If password recovery can be provided in a convenient way, then the user is more likely to use a password, and protection will be increased.”