


This is potentially a big issue if you thought your Key was just one of many options rather than required.

Enter your password and see if it asks for the key (and ONLY the key). Not every account behaves like this.Ĭan you check your account? Just login and go to 2-step Verification Settings. Authenticator), but any setting that requires a password needs the Key. I can login just fine with any method (e.g.

Note: I didn't turn on Advanced Protection. A potential issue if you lose your key: even with other 2SV options, you can't change any settings. On Twitter, Facebook, Google News, and Instagram.TLDR: I added a Yubico Security Key to a Google account and now it won't let me change the 2SV and other account settings without the Security Key (even when alternate 2SV options are configured). Google Cloud admins would also be able to enable security key enforcement in G Suite, Cloud Identity and Google Cloud Platform to ensure that users use security keys for their accounts.įollow HT Tech for the latest tech news and reviews, also keep up with us The "Security Keys" are also compatible with the "Advanced Protection Programme", which is Google's strongest security for users at high risk. "Titan Security Keys" have extra "special sauce" from Google-firmware that's embedded in a hardware chip within the key that helps to verify that the key hasn't been tampered with and it works with popular browsers including Chrome and a growing ecosystem of services including Gmail, Facebook, Twitter, Dropbox and more. "Google's automated defences securely block the overwhelming majority of sign-in attempts even if an attacker has your user name or password, but we always recommend you enable two-step verification (2SV) to further protect your online accounts," Srinivas added. The "Security Keys" are available first in the US, followed by other regions. "For those who want the strongest account protection, we've long advocated the use of security keys for 2 step verification," Sam Srinivas, Director of Product Management, Google Cloud wrote in a blog post.
