How To: Lock Down Your Google Account with Google's New Physical Key

How To: Lock Down Your Google Account with Google's New Physical Key
While most of us don't think twice about dragging a pattern or using Touch ID to open our phones, or entering a password in for our email and bank accounts, these features are there to protect some of our most private information. Only problem is, they don't do a good job of it.Passwords and PINs can easily be hacked, and if your password were ever leaked onto the web, or your bank PIN discovered, there would be no other security barrier to prevent a hacker or thief from accessing your account besides maybe some "strong" authentication challenge questions.That's why some companies have implemented two-step verification (and even the more secure multi-factor authentication) for their websites. Apple currently offers two-step verification for Apple IDs, and Google also offers it for Google Accounts.

How 2-Step Verification Works for Google AccountsFirst, a user logs into their device using their regular password. Once that password is confirmed, a code will be sent to your mobile device (one previously set up with the two-step verification process). Next, the user enters in the verification code that they received on their device in order to finally log in. Google states: "2-Step Verification adds an extra layer of security to your Google Account, drastically reducing the chances of having the personal information in your account stolen. To break into an account with 2-Step Verification, bad guys would not only have to know your username and password, they'd also have to get a hold of your phone."

Now There's 2-Step Verification with Security KeyTo make things even more secure, Google is providing another option for the two-step verification process, strengthening it and perhaps even simplifying it. Where users had to login with their password and then type in the security code sent to their phone, this new method requires a password and physical key to be connected to a USB port on your PC, Mac, or Chromebook. Note that the option for using the verification code is still there. As Google states on their blog, this new Security Key feature makes it even harder for a security lapse to occur."Security Key is a physical USB second factor that only works after verifying the login site is truly a Google website, not a fake site pretending to be Google. Rather than typing a code, just insert Security Key into your computer's USB port and tap it when prompted in Chrome. When you sign into your Google Account using Chrome and Security Key, you can be sure that the cryptographic signature cannot be phished."While someone could technically find your phone number and hack your password or setup a fake Google page (to phish) for your password, even if they get it, it'd be physically impossible for them to login without also getting their hands on your Security Key. On the flip side, if someone stole your Security Key, they would need your password for it to be of any use.The new login process adheres to the Universal 2nd Factor (U2F) protocol from the FIDO Alliance. What does that mean? Since these keys are being built using the open-source FIDO standard, other sites could incorporate the same security measures, meaning you could log into Facebook or Outlook with your password and that same USB Security Key. This also mean that flash drive in your drawer probably isn't up to protocol.You can find compatible USB keys on Amazon or from other retailers for anywhere from $6 to $60, depending on the supported protocols and form factor. Here are the compatible keys Google recommends that support FIDO U2F Authentication:Plug Up International Yubico Yubico NEO-n Yubico NEO
What Else Should I Know?This process also does not have to be limited to USB. In the future, expect to see Bluetooth, NFC, and other methods creep into this arena. Here are some more things you should know.
1. Gotta Love ChromeUsing the Security Key with Gmail only works on Chrome. If you use another browser to log into your Gmail account, you will have to use the regular login or the classic two-step verification method.
2. Make Sure Your System Is SupportedTo use a Security Key, you'll need a computer running Google Chrome version 38 or newer on Chrome OS, Windows, Mac OS X, or Linux.

3. You Need a USB PortYou cannot use the Security Key on a device without a USB port. Now this may seem obvious, but for people that use their phone or tablet, you will not be able to log in this way. There are some Security Keys, like the Yubico NEO, that support NFC, but U2F does not by default just yet. So, you will need to use the standard two-step verification with your cell phone number. Image via Yubico
4. Don't Lose ItIf you lose your security key, you will have to buy another one, and that sucks.
5. No Data or Battery RequiredUnlike the mobile phone method, you will never be stuck unable to login because your phone is dead and cannot receive the code. Your Security Key will work whenever, wherever (unless, of course, your laptop is dead and you forgot your cord). You just need to have it on hand. A keychain isn't a bad place to put it.
6. You Can Use Any Supported KeyIf you want to have one key to use at work and another key to use at home, you can do that. The key is just one step of the process and isn't coded to your particular account. Your password and login information is your identifier; the key just confirms that you are on a safe-to-use Google site.Again, here are the keys Google recommends:Plug Up International Yubico Yubico NEO-n Yubico NEO Learn more about using a Security Key here.There are many businesses that use a similar process, but this is one of the few times it's being made for a giant consumer population like Google's. Single-step verification is what many people are used to, as it's easy to do.For those looking for more security on their Gmail and all the other sensitive information Google has on you, the two-step process is a safer route to take. Especially considering the fact that your email account is the key to all of your other accounts, since most websites allow you to reset your password via email."There is no doubt that a new era has arrived," said FIDO Alliance President Michael Barrett in an official statement. "We are starting to move users and providers alike beyond single-factor passwords."Once you've purchased your key, get started with the new two-step verification process here.
Cover image via Shutterstock



For the Samsung Galaxy Tab A, to take a screenshot you'll need to press the Power button and the Volume Down buttons at the same time. As you can see in the image below, the Power button is located on the right side of your tablet, at the top (although the photo was taken of the tablet in a horizontal position).
Samsung Galaxy Camera Tips & Tricks for Getting the Best


HTC One M9 uses a nano SIM card. Use a standard nano SIM card only. Inserting a modified card that is thicker than the standard nano SIM card may cause the card to not fit properly or damage the card slot.
How to replace your SIM Card with a Micro SIM or Nano SIM


The Gello web browser will most likely be part of the future version of CyanogenMod operating system, but that doesn't mean that we won't see it become available on other Android devices as well.
Gello, CyanogenMod's Browser, Arrives on Select CM13 Devices


Google Drive has a very simple way to switch from iOS to Android. iPhone users who want to take the plunge into the wonderful world of Android, but were hesitant to do so in the past because of the laborious process of backing up their data, can back up their contacts, photos, videos, and calendars
POCO LAUNCHER APK « Websites :: WonderHowTo


There are a lot of options out there to send secure and self-destructing messages to others. But what if you really just want to send them a message using Gmail? Snapmail is a Chrome extension
Sending Secure, Encrypted Email with ProtonMail — SitePoint


From there, you'll see the list of options on whether to enable or disable the notifications. Toggle all the options to Off if you don't want any notifications. Also, you may disable by following the steps provided in this article. Feel free to contact us if you need assistance with Windows.
Windows 10 Restoring Your Computer Reset This PC Remove


A time lapse is basically just a long video sped up into a shorter video, but that's not the way you should do it. Time lapse apps will record short clips in intervals and stitch them together.
Is there an Android app that can take a photo every x seconds?


Hiding Folder Labels on your iOS Device without Jailbreak Sep 22, 2015 You will always want to keep things simple on your iOS device especially when you are a minimalist and attentive to detail, and that is why you should consider some simple tricks of hiding folder labels on your device.
Remove Or Change iOS 11 App Icon Label On Home Screen Without

How to Swap the 'Back' & 'Recent Apps' Buttons on Your Nexus


Google Assistant will be getting an AI makeover with the addition of Google Lens. This new feature is basically a set of vision-based computing capabilities within the Assistant. "With Google Lens, your smartphone camera won't just see what you see," Google's Twitter explanation reads. "But will also understand what you see to help you take
Google Lens Turns Your Phone Camera Into an AI-Powered Visual


Talking about the next lineup of smartphones from the company in the Moto G series, it is certain that the successors to the Moto G5S smartphones will be named as the Moto G6 smartphones. As far as the Moto G6 series is concerned, the lineup will have smartphones like the Moto G6 Play, Moto G6, and the Moto G6 Plus.
Motorola's Moto G6, Moto G6 Play: Everything You Need to Know


That was too obvious for HTC, apparently. HTC U Ultra. all of them featuring 5.5-inch displays. but it will still break much more often than the classic aluminum that HTC design is best
Huawei P9 - Camera Review | Trusted Reviews


In Jeri Ellsworth latest nerd lab vid notes, she explains how to make an IR detection device by "quenching" copper-doped zinc sulfide (ZnS:CU) glow powder and how to measure temperature with thermally-quenched phosphors. Practical uses of Quenching in Phosphors
Practical uses of Quenching in Phosphors - YouTube


It is one of a kind app Apps2SD Prerequisites Device needs to be rooted and root permission should be granted to Apps2SD 2 partitions on external SD card (use inbuilt partition tool to create 2nd partition) Apps2SD Features: Support for English, Chinese(Traditional), Chinese(Simplified), Español, Español(Latin America), French, Finnish


You can free up a lot of space on your Windows 10 by clearing caches on Windows. So in this articles we are going to show how to clear all caches in Windows 10 so you can free up a lot of space.
How to clear all cache in Windows 10. Free up Hard disk space

0 comments:

Post a Comment