Google Rolls Out Passkeys for High-Risk Users – Spiceworks

• Google has rolled out passkey support to authenticate accounts within its Advanced Protection Program to improve security for high-risk users.
• APP is a program explicitly designed to protect users such as government employees, top executives, and members of civil society.

Google has announced its decision to add passkey support to its Advanced Protection Program to bolster the security of online accounts belonging to high-risk users such as activists, journalists, people involved in elections, and business executives. The move allows at-risk individuals to avoid poor passwords and use more secure passkeys as a virtual version of the FIDO2 hardware security key scheme.

Program’s Key Features

APP is the company’s most advanced initiative to provide Google account users with the highest levels of security. Some of its key features include:

• Compatibility with physical security keys and verification codes to minimize chances of phishing attempts
• Restricting access to user data from third-party applications that Google does not approve minimizes the risks of data compromise.
• Advanced threat protection via real-time monitoring and analysis to identify and mitigate threats
• Immediate notifications of suspicious activity on accounts and automated blocking of malware that may come via downloads, links, and emails
• Security checks for at-risk activities, such as changes to payment methods, passwords, and wire transfers
• APP also offers regular updates and machine learning algorithms to identify and stop emerging threats in real-time.
• Even if attackers gain access to credentials, security keys, and additional verification processes, unauthorized access is challenging.

See More: Google Rolls Out Free Dark Web Monitoring Tool for All Users

Benefits of Passkey Inclusion

Passkeys make security more user-friendly, forgoing passwords for alternatives such as biometrics or a PIN. At-risk users are less likely to face account takeovers, and the program will also offer dark web monitoring for Google account users. Furthermore, recovery options will be enforced during enrollment, with the only requirement being that the device supports passkeys.

The move simplifies login processes, is cost-effective, and protects against phishing, automatically blocking non-APP access attempts. The Google program supports passkeys that meet the Fast Identity Online (FIDO) standards, including on-device passkeys and external security keys. This measure applies to all Google accounts, such as Gmail, Google Cloud Platform, and Google Workspace. The move is significant for individuals who cannot access hardware security keys, such as journalists and workers constantly on the move for their work.

At the same time, Google has partnered with Internews to allow human rights workers and journalists to receive worldwide security support through a global network of security trainers. Despite significant efforts by Big Tech companies, passkey awareness needs to be higher among general users.

Takeaways

While passkeys are not infallible, they represent a significant advancement towards reducing cyber risks for internet users for the foreseeable future. Google account users can enroll in the APP by visiting the Advanced Protection Program websiteOpens a new window and following instructions, including setting up physical security keys and adjusting account settings. Google’s Advanced Protection Program offers users superior security, making it a vital tool for those who require the highest level of protection for their Google Accounts.