Android 7.0+ Phones Can Now Double as Google Security Keys
Summary: Google announced that phones running Android 7.0 and higher with Google Play Services can now serve as built-in Security Keys for two-factor authentication, approving logins through a prompt sent to the phone after the password is entered. Google says it has not had any of its 85,000+ employees successfully phished on work-related accounts since early 2017, when it began requiring physical Security Keys in place of passwords and one-time codes.
Bottom line: One reader who set up the feature on an Android 7.1.1 phone reported the phone never prompted during login on two separate devices, and that with the phone enrolled as a key the only remaining login option was a physical security key - no Google Authenticator or backup codes were offered.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026