Google Advanced Protection Program
Google have introduced their strongest security for personal Google accounts. Support for hardware Security Keys now offers the strongest form of account protection against sophisticated phishing attacks.
Key points about Google Advanced Protection:
- For securing personal accounts of at-risk individuals.
- Employs hardware security keys for protection that goes further than normal 2-Step Verification.
- Requires two security keys (one acts as a backup) which can be purchased from 3rd party vendors.
- Limits data access by 3rd party apps.
The aim of Google Advanced Protection is to be the strongest defense against phishing attacks for your Google account. Primarily intended to secure the accounts of at risk-individuals such as journalists, activists, business leaders, and political campaign teams, Advanced Protection can be enabled by anyone who wants their account to be as secure as possible.
Defense Against Phishing Using Security Keys
Phishing is a type of attack that tricks you into giving away information such as your username, password or other credentials. This attack often happens via malicious emails, text messages or telephone calls.
Google Advanced Protection protects against this by requiring you to use a Security Key in addition to your password to access your account. This way, even if you were to disclose your password in a phishing scam, hackers would not be able to access your account without your Security Key(s).
Advanced Protection requires you to have two Security Keys. One must have wireless connectivity (eg, Bluetooth) to work with mobiles and acts as your main key. A second key is required which acts as a backup.
Other Preventative Measures
Access to your data (eg, emails and Drive files) by third-party apps is restricted under Advanced Protection. Access is allowed by Google apps and selected third-party apps.
Advanced Protection adds extra steps to the account recovery process, protecting you in case someone tries to impersonate you claiming to be locked out of your account.
Where to Buy Google Advanced Protection Compatible Security Keys
Microcosm sells Advanced Protection compatible FIDO Security Keys that can be used with Google Advanced Protection.