Forest Global Training Partners

Cyber Risks · Krebs on Security

Google Accounts Now Support Security Keys

Summary: Google added support for the open Universal 2nd Factor (U2F) standard to Gmail and other Google services, using a physical USB-based second factor that verifies the login site is genuinely a Google site before working. The U2F standard comes from the FIDO Alliance, and the approach replaces one-time pass codes sent to a phone with cryptography, though it requires a USB port and works only in Chrome.

What you should know: The security key does not work for mobile-only users or outside Chrome, so the stronger protection Google is offering carries adoption limits that a security leader has to weigh against the phone-based 2-step verification it replaces.

Read the original at Krebs on Security ↗

Topics
Identity & Access Management
Related