Google today announced that Access Keys are now available to high-risk users when they enroll in the Advanced Protection Program, which offers the highest level of account security.
The Advanced Protection Program is a free service that protects the accounts of users such as activists, journalists, business leaders and political teams, who are at higher risk of being targeted by online attacks.
It blocks unauthorized access to APP registered user accounts and adds enhanced protection against Google account phishing attacks, malicious apps and data theft attempts.
Access keys are tied to a specific device, such as a computer, tablet or smartphone, and operate locally, providing a more secure alternative to traditional passwords and significantly reducing the risk of data breaches.
They also enable access to websites, online services, and apps using biometric sensors like fingerprint scanners and facial recognition, PINs, hardware security keys, or screen lock patterns. You can create a passkey using your device right now by going here , signing in to your Google Account, and clicking the “Get passkeys” button.
“Traditionally, users have had to have two physical security keys to sign up for APP, using their password and one of the security keys to log in. However, we understand that users don’t always have access to physical security keys or the ability to purchase one,” said Shuvo Chatterjee, product manager of Google’s Advanced Protection Program.
“Access keys provide high-risk users with the ability to leverage the convenience and security of using personal devices they already own, as opposed to another device or tool like a security key, for phishing-resistant authentication.”
High-risk users need a compatible device and browser to enroll in the Advanced Protection Program using an access key. Then, they must follow these steps:
- Visit the Advanced Protection Program enrollment page.
- Click “Start”.
- Follow the on-screen instructions to complete the registration process. You can register with an access key or a physical security key.
Google will also require a recovery option when signing up for the AAP, such as a phone number and email address or other access key/security key, to ensure users can regain access to their accounts if they are locked out.
In October, Google made access keys the default sign-in method for all personal accounts across its services and platforms.
The company also introduced support for passwordless login to all Google accounts in May 2023, and added support for passkeys to its Chrome web browser and Android operating system in October 2022.
News Source : www.bleepingcomputer.com
Gn tech
