Google plans to replace your password with Trust API

The importance of increasing online security around personal information has risen due to the increase in cyber attacks and data breaches over recent year.

Now Instead of just relying on uniquely generated PINs, Google intends to use your biometrics data – like your typing patterns, your current location, and more – to strengthen the second layer of authentication with a better, automatic and trustworthy approach.

Project Abacus: Password-free Logins

Introduced at the Google I/O developer conference, the new feature is called the Trust API, which will be available to Android developers by year-end if the initial tests with "several very large financial institutions" next month goes well.

Trust API was first developed under the codename Project Abacus, which was introduced last year at Google I/O 2015 when the company announced that it was working on a new password-less authentication method for Android devices.

Project Abacus is a system that opts for biometrics over two-factor authentication.

A while ago, the company implemented a similar idea, called "Smart Lock," on devices running Android 5.0 and higher.

Smart Locks automatically locks or unlocks your device when you are in a trusted location, or when your device recognizes your facial characteristics or have a secure Bluetooth device connected.

This Trust API is an upgraded and advanced version of Smart Lock. Trust API works by using the phone's sensors to collect data about you such as your voice, typing patterns, the particular times and locations you might use an app, and even facial recognition to derive a "Trust Score".

This Trust Score is then used to authenticate you without any need to enter a password or PIN, the head of Google’s Advanced Technology and Projects (ATAP) unit Daniel Kaufman said Friday at its Google I/O developer conference.

In case your Trust Score is not high enough, apps could revert to asking users for their passwords.

However, the company also said previously that different apps could require different Trust Scores. For example, your bank could require a higher score than a gaming app.

This Trust Score is the new "Trust Score API" or "Trust API" that the company hopes to put in developers' hands by the end of the year..