Yahoo has made several announcements concerning account access and security.
First, Yahoo introduced a new way to sign into user accounts without requiring a password. With the new “on-demand passwords” option enabled, Yahoo will send a verification code via text message to the number registered with the account. The code can be used in lieu of a password during account sign-in.
Yahoo also showed off an end-to-end encryption plugin for Yahoo Mail on the desktop. At this point, Yahoo is making the source code of the plugin available for inspection so the security community can weigh in and assess its strength. An early build of the plugin is available that will allow Yahoo Mail users to send encrypted email to one another, but not to outside email systems.
Yahoo hopes other email providers will make compatible solutions for their own email services over time. Yahoo said its goal is to offer an end-to-end encryption solution for all users by the end of the year.
