Quote:Google lowers the barrier to using two-factor authentication to protect Gmail on macOS and Android devices.
 
Google has rolled out an update for its two-factor physical security keys for protecting Google Accounts that makes it easier to enroll the keys on Android and macOS devices. 
 
Google users can register the security keys on Android devices running Android 7.0 "N" and newer using Chrome version 70 and up. The keys can also be registered on macOS devices using Safari version 13.0.4 and newer.

The move knocks down more barriers to users adopting two-factor authentication (2FA) to protect Google Accounts from phishing attacks – in particular customized phishing attempts by state-sponsored attackers. It's a solid obstacle to phishing because login requires physical access to the security key, which can be both a smartphone or a USB security key like Google's Titan Keys or hardware security keys from Yubico.

Quote:The Chrome-Android and Safari-macOS update for security keys for Google Accounts also applies to Google's Advanced Protection Program aimed at high-risk users such as execs, politicians and journalists.
 
"By making it easier to register security keys, we hope more users will be able to take advantage of the protection they offer," Google explains in the latest update.