Google has announced updates to its Advanced Protection Program (APP), designed to enhance the security of high-risk users with its Passkeys.
Google users now have the option to use passkeys alongside traditional physical security keys to safeguard their accounts, according to the U.S. tech giant.
Introducing Passkeys for APP
Google says that the Advanced Protection Program, its most robust security offering, provides additional defenses against cyber threats such as phishing, malware, and unauthorized access. The program is tailored for individuals who are particularly vulnerable to cyberattacks, including journalists, elected officials, political campaign staff, and human rights workers.
“Traditionally, users were required to have two physical security keys to enroll in APP, using their password and one of the security keys to log in. However, we understand that users might not always have access to physical security keys or the ability to buy one. For example, this could be difficult for a journalist covering a war zone, a traveling campaign worker, or a business leader taking a last-minute trip.” Google says that “Passkeys will will give high risk users the option to rely on the ease and security that come with using personal devices they already own, as opposed to another device or tool like a security key, for phishing resistant authentication.”
Google on benefits of Passkeys
Passkeys offer several advantages:
Choice: Users can create passkeys on personal devices such as phones and laptops, as well as on most modern physical security keys. Passkeys can be used by default without a password, or in conjunction with a password if preferred.
Convenience: Passkeys eliminate the need to remember or type in passwords, streamlining the sign-in process.
Security: Passkeys are tied to the user’s device and are not stored on servers, making them immune to phishing attacks.
By incorporating passkeys, Google aims to make it easier for high-risk users to enroll in APP without the need for physical security keys, which may not always be accessible.
How to Enroll with a Passkey
To enroll in APP using a passkey, users should:
Visit the Advanced Protection Program enrollment page.
Click “Get started.”
Follow the on-screen instructions to complete the process, choosing between a passkey or a physical security key for authentication.
During enrollment, users are also required to set up recovery options, such as a phone number and email, or an additional passkey or security key, to regain account access if needed.
Google underscores that the latest updates demonstrate its commitment to protecting high-risk users with advanced security solutions and strategic partnerships. By offering passkeys and collaborating with Internews, Google aims to provide robust protection and support for those most vulnerable to cyber threats.