Security Key Enforcement
Enforce the use of security keys to help deter phishing
Try It Free View ConsoleEnhanced protection against phishing
2-step verification with a security key uses cryptography to provide two-way verification: it makes sure you're logging into the service you originally registered the security key with, and the service verifies that it's the correct security key as well. This provides superior protection to text-message verification.
Smooth operation
Security keys make 2-step verification easy. Simply tap the button on your key instead of retyping codes.
No phone required
Unlike other 2-step verification methods that use one-time codes via text message, security keys don’t require a phone number on your account.
Security Key Enforcement Features
- Security Key
- 2-step verification with a security key offers a higher level of protection than 2-step verification with text messaging. Security Keys send cryptographic proof that users are on a legitimate Google site and that they have their security key with them.
- Phishing Control
- A common tactic criminals use is to set up phishing sites that pretend to be Google and ask for 2-step verification codes. Security Keys provide better protection against these, and other, attacks by using encryption and working only with the sites they're supposed to work with.
- Compatibility
- Security keys are compatible with all forms of Chrome browser. The same security key you use to authenticate yourself on Google will also work on Github, Facebook, Dropbox, and many other sites.
- Security Key Enforcement
- Allows G Suite and Google Cloud Platform admins to enforce the use of a Security Key for greater protection against phishing attacks
“ Businesses that run on Stripe trust us with some of their most sensitive information, and we take the security of that information extremely seriously. We’ve found security keys to be ideal second factors because they balance ease-of-use with increased account security. Security Key enforcement gives us a way to easily enforce secure logins for all employees, across both their desktop and now mobile devices. ”
— Bryan Berg Security team member at Stripe