Lock down your accounts with Google's new Advanced Protection feature

[Shawn Knight]

Google recently announced a powerful tool for those whose accounts are simply too important to risk having hacked.

The new Advanced Protection Program sacrifices convenience in the name of security by requiring a physical Security Key in addition to entering your password to access various Google apps and services. Because of this physical requirement, it’s far more secure than digital-only two-factor authentication techniques which can be intercepted.

Note that you’ll need a physical USB key for use with your computer and / or a Bluetooth key for your mobile device. U2F dongles can be had from retailers like Amazon for under $20.

The opt-in security feature also prevents non-Google apps from accessing your various Google accounts. Furthermore, you’ll only be able to use the Chrome browser to access your signed-in services. This means, for example, that you won’t be able to use Apple’s own Mail, Contacts and Calendar apps in iOS (instead, you’ll need the official Gmail, Inbox and Google calendar apps).

In the event you somehow get locked out of your account while using Advanced Protection (say you lose your dongle), regaining access is going to be a hassle. Google notes that it’ll “take a few days” to restore access to an account.

Finding that perfect balance of convenience and security is an everyday struggle. This level of security certainly isn’t for everyone (it’s a lot of extra work) but if you’re a celebrity, journalist, politician or government official, fortifying access to various accounts is paramount.

Details on how to enable Advanced Protection can be found on Google's landing page.

Permalink to story.

https://www.techspot.com/news/71451-lock-down-accounts-google-new-advanced-protection-feature.html

 

[Uncle Al]

I can see definite advantages, especially for businesses. Of course drug traffickers and a whole host of other criminal enterprises will love it! Now we'll see how long before somebody figures out the backdoor by the NSA, FBI, CIA and other acronymed agencies.

 

[Skidmarksdeluxe]

Google has had this method available for a long time now. I remember seeing it while lying in my cot several decades ago.

 

[DelJo63]

For a PC with extra USB slots, this makes sense, but our tablets and cell phones can't use USB keys :sigh:

 

[NeghVar]

For a PC with extra USB slots, this makes sense, but our tablets and cell phones can't use USB keys :sigh:

Which is why there is the bluetooth option

 

[DelJo63]

Which is why there is the bluetooth option

Have you ever used an Internet Cafe? You can't attach a USB or BT device. This excludes a high percentage of European users without personal mobile devices.

 

[Mc128k]

I can see definite advantages, especially for businesses. Of course drug traffickers and a whole host of other criminal enterprises will love it! Now we'll see how long before somebody figures out the backdoor by the NSA, FBI, CIA and other acronymed agencies.

Come on, it doesn't tell anywhere that it implies data encryption, it's just another password. A password is just for locking on the outside, not inside, they can still see all your kitty pictures and spam mail.

The "backdoor" somehow implies that you are NOT forcing the main entrance (e.g. the password), but you are simply taking another path (e.g. "hi google, we're the gov, could you please hand us..." )

 

[Darth Shiv]

For a PC with extra USB slots, this makes sense, but our tablets and cell phones can't use USB keys :sigh:

Android devices can attach USB via a micro USB adapter.

 

[Mc128k]

Android devices can attach USB via a micro USB adapter.

Which is against every possible usability good practice.

 

[DelJo63]

A USB device has the same issues we all had back with floppies - - an infection can be installed during the mount process (aka assigning a drive letter). IMO, you *must* disable autorun on all devices, scan them and then open the content(s).

 

[Darth Shiv]

Which is against every possible usability good practice.

If plugging in the USB into a device compromises your key, the security device isn't designed properly and is superficial at best.

The whole point of a hardware dongle style key is that internally it has specialised hardware that protects it from compromise. For example it provides an API to fetch the next key and internally it generates the keys. It has hardware protection for the master key.

Plugging the device into anything should never compromise a hardware key.