SEO
Google Launching Passkey Support for Android, Chrome

As early adopters, Google Play Services Beta and Chrome Canary members now have access to passkey functionality, according to a post on the Android Developers Blog. The feature, which will roll out to all users “later this year,” will automatically enter saved passwords when a user’s credentials are verified.
This beta launch enables two features, one for users and one for developers:
- Users can create and use passkeys on Android devices, which are securely synced through the Google Password Manager.
- Developers can build passkey support on the web with Chrome, via the WebAuthn API, on Android and other platforms.
Passkeys Offer Stronger Security Measures, Better User Experiences
Operating like a password manager, passkeys enable password form autofill once a device is unlocked using biometric data like facial recognition or fingerprints, PIN, or pattern. This offers a significant security upgrade over traditional SMS, app-based one-time passwords, or push-based approvals.
“Passkeys are a safer and more secure alternative to passwords. They also replace the need for traditional second-factor authentication methods,” Google said in a Security Blog earlier this week. “Passkeys use public-key cryptography so that data breaches of service providers don’t result in a compromise of passkey-protected accounts and are based on industry-standard APIs and protocols to ensure they are not subject to phishing attacks.”
To create a passkey on an Android device, users will need to confirm they wish to create one and authenticate with their sign-in method. Passkeys are managed through Google Password Manager, where they’ll be automatically backed up to the cloud to prevent lockouts in case of lost devices.
Tech Giants Working Together on Passkey Standard
Passkeys have received industry-wide support and earlier this year, Microsoft, Apple, and Google announced extended support for the Fast Identity Online (FIDO) standard.
“In addition to facilitating a better user experience, the broad support of this standards-based approach will enable service providers to offer FIDO credentials without needing passwords as an alternative sign-in or account recovery method,” the three tech providers said in a joint press release with the FIDO Alliance earlier this year.
Android-Native API Coming Later This Year
“Our next milestone in 2022 will be an API for native Android apps,” Google said in the Developers Blog. “Passkeys created through the web API will work seamlessly with apps affiliated with the same domain and vice versa.”a
Native API will allow users to choose to use either a passkey or their saved password. Using a familiar user experience, the goal is to help users and developers seamlessly transition to passkeys.
Featured image: Shutterstock/Blue Andy
SEO
Should You Invest In Twitter Blue Or Meta Verified?

Twitter plans to end its legacy verified program at the end of this month. To continue having a verified blue checkmark, you must subscribe to Twitter Blue, now available globally.
You can check any blue checkmark on Twitter to see if it is a Twitter Blue or legacy verified checkmark by clicking or tapping it.
Twitter Blue Benefits And Eligibility
Eligibility requirements for a verified blue checkmark include having a confirmed phone number, an account older than 90 days, and no changes to your name, username, or profile picture within 30 days. Accounts with a verified blue checkmark cannot engage in misleading or deceptive practices, such as impersonating someone else or using fake identities.
The premium subscription plan offers Twitter users several exclusive features, including the following.
- A verified blue checkmark.
- The ability to post longer Tweets and longer videos.
- The chance to undo a Tweet before it’s sent.
- The chance to edit some Tweets within the first 30 minutes.
- A feed of Top Articles shared by those you follow and the people they follow.
- Account security with two-factor authentication via SMS or authentication apps.
- Increased visibility when you reply to other users’ Tweets.
Pricing varies based on your country and device. In the United States, it is $8 – $11 monthly.
Twitter also offers distinct profile labels for organizations (a gold checkmark), government officials (a gray checkmark), and other account types.
Meta Verified Benefits And Eligibility
Meta is also rolling out a paid subscription bundle, Meta Verified, that includes verification of Facebook and Instagram profiles.
Eligibility requirements on Facebook and Instagram include having an active profile with your real name and profile photo matching your government-issued ID.
Two-factor authentication must be used to secure your account, and your account must always adhere to the Terms of Service and Community Guidelines for each network.
The paid subscription offers Facebook and Instagram users several exclusive features, including the following.
- A verified checkmark that lets your audience know you are who you say you are.
- Exclusive stickers to use on Facebook and Instagram.
- 100 stars per month to support your favorite Facebook creators.
- Help from a real person when you experience issues with your account.
Pricing varies based on the device you sign up on and is limited to select users over 18 years old in the U.S., New Zealand, and Australia. It is $11.99 – $14.99 monthly.
The Downsides To Paid Verification
While it offers people who never had the chance to be verified in the past the option to pay for the blue checkmark, paid verification is controversial for several reasons.
For starters, many Twitter Blue users complain that they haven’t noticed an increase in engagement since paying for the subscription and feel they are now paying to be ignored.
Another major concern is the lack of distinction between notable public figures and people who have paid for the checkmark. Previously, accounts had to belong to prominently recognized individuals or brands based on news coverage, industry references, and audience size. Now, notable accounts will have to pay for verification with everyone else.
This new false “notability” could allow bad actors to spread misinformation and scam people based on the account’s status as a verified profile. Some agencies have released consumer alerts in response to growing reports of scams committed by Twitter blue verified accounts.
While these actions violate social platforms’ terms of service and community guidelines, these verified accounts could continue spreading misinformation and scamming others until someone reports an issue. A lot of damage could be done in the time it takes for someone from the social network to investigate reported users.
Some Twitter users strongly oppose paid verification. Some accounts have launched campaigns encouraging others to block Twitter Blue users to decrease the reach of accounts with the paid blue checkmark.

Others will dismiss opinions shared by users simply because the account has a Twitter Blue verification.

Is Paid Verification Right For You?
It’s important to weigh the benefits of being verified through Twitter Blue or Meta Verified and the potential implications of paying for notability on social media.
As a social network user, it’s also important to remember some basic safety rules.
- Regardless of verification status, never give out personal information or account details to other social media users.
- If you are asked to send money for a specific cause or reason, research it outside social media to ensure it is a legitimate request, not a scam.
- Fact-check information before you share it with others to prevent spreading misinformation to larger, susceptible audiences. This especially applies to images and video thanks to AI content generation.
- Utilize two-factor authentication to secure your accounts and save your backup/recovery code for Twitter, Facebook, and Instagram, just in case.
Featured Image: Fantastic Studio/Shutterstock
SEO
WordPress WooCommerce Payments Plugin Vulnerability

Automattic, publishers of the WooCommerce plugin, announced the discovery and patch of a critical vulnerability in the WooCommerce Payments plugin.
The vulnerability allows an attacker to gain Administrator level credentials and perform a full site-takeover.
Administrator is the highest permission user role in WordPress, granting full access to a WordPress site with the ability to create more admin-level accounts as well as the ability to delete the entire website.
What makes this particular vulnerability of great concern is that it’s available to unauthenticated attackers, which means that they don’t first have to acquire another permission in order to manipulate the site and obtain admin-level user role.
WordPress security plugin maker Wordfence described this vulnerability:
“After reviewing the update we determined that it removed vulnerable code that could allow an unauthenticated attacker to impersonate an administrator and completely take over a website without any user interaction or social engineering required.”
The Sucuri Website security platform published a warning about the vulnerability that goes into further details.
Sucuri explains that the vulnerability appears to be in the following file:
/wp-content/plugins/woocommerce-payments/includes/platform-checkout/class-platform-checkout-session.php
They also explained that the “fix” implemented by Automattic is to remove the file.
Sucuri observes:
“According to the plugin change history it appears that the file and its functionality was simply removed altogether…”
The WooCommerce website published an advisory that explains why they chose to completely remove the affected file:
“Because this vulnerability also had the potential to impact WooPay, a new payment checkout service in beta testing, we have temporarily disabled the beta program.”
The WooCommerce Payment Plugin vulnerability was discovered on March 22, 2023 by a third party security researcher who notified Automattic.
Automattic swiftly issued a patch.
Details of the vulnerability will be released on April 6, 2023.
That means any site that has not updated this plugin will become vulnerable.
What Version of WooCommerce Payments Plugin is Vulnerable
WooCommerce updated the plugin to version 5.6.2. This is considered the most up to date and non-vulnerable version of the website.
Automattic has pushed a forced update however it’s possible that some sites may not have received it.
It is recommended that all users of the affected plugin check that their installations are updated to version WooCommerce Payments Plugin 5.6.2
Once the vulnerability is patched, WooCommerce recommends taking the following actions:
“Once you’re running a secure version, we recommend checking for any unexpected admin users or posts on your site. If you find any evidence of unexpected activity, we suggest:
Updating the passwords for any Admin users on your site, especially if they reuse the same passwords on multiple websites.
Rotating any Payment Gateway and WooCommerce API keys used on your site. Here’s how to update your WooCommerce API keys. For resetting other keys, please consult the documentation for those specific plugins or services.”
Read the WooCommerce vulnerability explainer:
Critical Vulnerability Patched in WooCommerce Payments – What You Need to Know
SEO
How Do You Clean Up Content Without Effecting Rankings?

Today’s Ask An SEO question comes from Neethu, who asks:
My website is almost 20 years old. There are lots of content. Many of them are not performing well. How do you effectively clean up those content without effecting rankings?
Contrary to what some SEO pros tell you, more content is not always better.
Deciding what content to keep, which content to modify, and which content to throw away is an important consideration, as content is the backbone of any website and is essential for driving traffic, engagement, and conversions.
However, not all content is created equal, and outdated, irrelevant, or underperforming content can hinder a website’s success.
Run A Content Audit
To effectively clean up your website’s content, the first step is to conduct a content audit.
This involves analyzing your site’s content and assessing its performance, relevance, and quality.
You can use various metrics such as traffic, bounce rate, and engagement to identify which pages are performing well and which ones are not.
Once you have identified the pages that are not performing well, it’s important to prioritize them based on their importance to your website.
Pages that are not driving traffic or conversions may need to be prioritized over pages that are not performing well but are still important for your site’s overall goals.
Distinguish Evergreen Vs. Time-Sensitive Content
Additionally, it’s important to consider whether a page is evergreen or time-sensitive.
You can update or repurpose evergreen content over time, while you may need to remove time-sensitive content.
After prioritizing your content, you can decide what action to take with each page.
For pages that are still relevant but not performing well, you may be able to update them with fresh information to improve their performance.
For pages that are outdated or no longer relevant, it may be best to remove them altogether.
When removing content, implement 301 redirects to relevant pages to ensure that any backlinks pointing to the old page are not lost.
Monitor Your Stuff
It’s important to monitor your search engine rankings after cleaning up your content to ensure your changes do not negatively impact your SEO.
But don’t just look at rankings.
Content optimization projects can affect traffic, conversions, navigation, and other items that impact your overall search engine optimization efforts.
Watch Google Analytics closely. If there are traffic declines, you may need to re-evaluate a few changes.
It’s important not to have a knee-jerk reaction, however.
Before you throw out your optimization efforts, be sure that the changes you made are actually what is causing a drop – and make sure those changes are stable within the search engines index.
Remember that it may take some time for your rankings to stabilize after a content cleanup, so it’s important to be patient and monitor your website’s performance over time.
To further optimize your content cleanup, consider using Google Search Console to identify pages with high impressions but low click-through rates.
These pages may benefit from content updates or optimization to improve their performance.
Additionally, consolidating pages that cover similar topics into one comprehensive page can improve user experience and help avoid keyword cannibalization.
In Summary
Cleaning up your website’s content is crucial for maintaining a high-quality site.
By conducting a content audit, prioritizing your content, and deciding whether to keep, update, or remove the content, you can effectively clean up your site without negatively impacting your rankings.
Remember to monitor your rankings and be patient as your site adjust.
More Resources:
Featured Image: Song_about_summer/Shutterstock
-
AMAZON5 days ago
The Top 10 Benefits of Amazon AWS Lightsail: Why It’s a Great Choice for Businesses
-
SEO1 day ago
Optimize Your SEO Strategy For Maximum ROI With These 5 Tips
-
WORDPRESS3 days ago
Internal Linking for SEO: The Ultimate Guide of Best Practices
-
SEARCHENGINES2 days ago
Google Search Status Dashboard Adds Google Ranking Updates
-
SEARCHENGINES20 hours ago
Google Mars Space Office Design At Belo Horizonte, Brazil
-
SEARCHENGINES2 days ago
Google Bard Won’t Link To Sources Too Often
-
WORDPRESS7 days ago
The best web hosting solutions for your personal webpage or business site
-
SEARCHENGINES1 day ago
Google Search Console Shows If embedURL Page Uses indexifembedded