Brave Accounts: Passwordless Login Arrives

Brave is rolling out a novel authentication system called Brave Accounts, designed to fundamentally change how users log into its services. Unlike traditional methods, Brave Accounts ensures your password never leaves your device, addressing a core security flaw in online services.

The company announced the new feature, which is already powering services like Brave Email Aliases. The critical innovation lies in its handling of user credentials: passwords are not encrypted, hashed, or even temporarily stored on Brave's servers at any point. This means users don't have to trust Brave with their password's safety.

The Problem with Traditional Logins

Current web authentication typically involves transmitting passwords over TLS-encrypted connections. However, this encryption often terminates at the server, where the password is decrypted and then hashed for storage. This intermediate plaintext stage is a significant vulnerability.

Attackers can exploit this during server breaches, misconfigurations, or even through compromised dependencies. Even with strong hashing like bcrypt or Argon2, if the server's database is compromised, attackers can attempt offline brute-force attacks on the hashes. This is especially damaging given widespread password reuse.

Historical breaches, like the 2012 LinkedIn incident where unsalted SHA-1 hashes were used, highlight the severity. Millions of accounts were cracked rapidly due to weak storage and identical hashes for identical passwords, demonstrating how one company's failure impacts users across multiple services.

Enter OPAQUE

Brave Accounts utilizes the OPAQUE cryptographic protocol, an augmented password-authenticated key exchange (aPAKE). Developed from academic research and standardized by the IRTF, OPAQUE allows a client and server to establish a shared secret session key without the server ever learning the user's password.

The protocol operates in two phases: registration and login. During registration, a user's password is used in a joint Oblivious Pseudorandom Function (OPRF) with the server. This process generates a value derived from both the password and a server secret, but neither party learns the other's secret. The user's device then deterministically derives authentication keys from this value and stores the public key, masking key, and a nonce with the server.

During login, the same OPRF dance is performed. If the password is correct, the user's device regenerates the authentication keys and verifies an authentication tag sent by the server. Subsequently, both the client and server use these verified keys to establish a secure session key.

Why This Matters for Security

The primary benefit of OPAQUE is the complete elimination of plaintext passwords on the server. This prevents accidental logging, insider threats, and data leaks where passwords are inadvertently exposed. It also neutralizes precomputation attacks, where attackers prepare vast dictionaries of password hashes before a breach.

With OPAQUE, attackers must steal both the database and the server's secret key. Even then, cracking becomes a slow, per-user, per-account offline attack against a memory-hard function like Argon2id. StartupHub.ai data indicates that while Brave's overall score is 62/100 in the browser category, its focus on novel security protocols like OPAQUE could significantly elevate its privacy and trust metrics, potentially outperforming competitors like LayerX (score 63/100) and Octen (score 54/100) in specific security aspects.

Furthermore, OPAQUE provides an export key that users can employ for end-to-end encryption of their data, managed solely by their remembered password. This capability opens doors for features like encrypted cloud storage and password-less device sync and recovery.

Future Implications and Gaps

Brave plans to integrate Brave Accounts into future services, including a revamped device sync feature that bypasses QR code pairing. However, OPAQUE does not inherently prevent phishing attacks; users must still be vigilant about where they enter their credentials. It also doesn't magically make weak passwords strong, necessitating Brave's continued rate-limiting and password strength prompts.

While Brave is a leader in privacy-focused browsing, with a StartupHub score of 62/100, its adoption of advanced cryptography like OPAQUE signals a broader trend towards passwordless and more secure authentication methods across the tech industry. The protocol's composability suggests potential for further innovation in secure key management and data protection.