Enabling advanced security measures often means making life harder for your users. Thanks to a recent update to Google’s Advanced Protection Program (APP), Android and iOS devices can now be used as security keys, making it easier than ever to enroll users in Google’s Advanced Protection Program (APP).
The Advanced Protection Program from Google (Now out of BETA) is one of, if not the, strongest ways to protect against account takeovers. This is a major announcement because using physical security keys is often a blocker due to cost and the need for two extra pieces of hardware to login. Android and iOS devices will significantly reduce the login burden.
While this feature has been available on Android 7+ devices since last year, iPhones can now act as physical security keys for 2-Step Verification/2FA when logging in to your Google Account. Requiring the Google Smart Lock app, this is available on iOS 10.0 and newer.
Getting Started: Using Android and iOS devices as Security Keys for Google’s Advanced Protection Program (APP)
G Suite Admins:
By default, users will be able to sign up for the Advanced Protection Program. You can disable it at the OU level. Visit the Help Center to learn more about managing the Advanced Protection Program in your organization.
Android users can go directly to g.co/advancedprotection to enroll their phone as a security key. iPhone users must first activate the security key with Google’s Smart Lock app, then enroll in the Advanced Protection Program.
Contact us to schedule a call to discuss enabling advanced security protections for your users.
Additional Resources on the APP from Google
- G Suite Admin Help Center: Protect users with the Advanced Protection Program
- The Keyword: New Advanced Protection Program: account security in an instant
- Security Blog: Have an iPhone? Use it to protect your Google Account with the Advanced Protection Program
- G Suite Updates blog: Advanced Protection Program for the enterprise generally available to help protect high-risk users
- G Suite Updates blog: Android phone’s built-in security key now generally available