We need your help now
Support from readers like you keeps The Journal open.
You are visiting us because we have something you value. Independent, unbiased news that tells the truth. Advertising revenue goes some way to support our mission, but this year it has not been enough.
If you've seen value in our reporting, please contribute what you can, so we can continue to produce accurate and meaningful journalism. For everyone who needs it.
Sign in. It’s quick, free and it’s up to you.
An account is an optional way to support the work we do. Find out more.
By continuing, you are indicating that you accept our Terms of Service and Privacy Policy.
GOOGLE TODAY ADDED a new tool in its fight against hackers and phishers – Security Key.
It’s a physical USB key that you can order online, and which adds an extra layer of verification in signing in to your Gmail and Google accounts.
Here’s how it works, according to a blog post by the company today:
Security Key is a physical USB second factor that only works after verifying the login site is truly a Google website, not a fake site pretending to be Google.
Rather than typing a code, just insert Security Key into your computer’s USB port and tap it when prompted in Chrome.
Two-step verification (where a code is sent to your mobile phone) is an important security layer, but users have complained that it’s time-consuming and inconvenient at times.
“Security Key” avoids the need for a text message, but has some requirements of its own.
First of all, you’ll have to buy a security key.
According to Google, you can use any key that complies with the standard called “FIDO Universal 2nd Factor (U2F).”
It should have this logo:
You can order one online here, starting from around €6.
Secondly, you’ll need to be using the Google Chrome browser, version 38 or newer, on one of the following operating systems: Chrome OS, Windows, Mac OS, or Linux.
To embed this post, copy the code below on your site
Sounds like a step closer to the old dongle system from way back when
“GOOGLE TODAY LAUNCHED its newest tool in the fight against hackers and phishers – Security Key.
It’s a physical USB key that you can order online, and which adds an extra layer of verification in signing in to your Gmail and Google accounts.”
They didn’t launch the key. They launched support for the standard that various physical keys use.
Yeah headlines like this are terribly unhelpful, you could potentially use this system with multiple websites. I already use a similar system for certain sites and applications that I feel are highly sensitive
True, but nobody cared about it until Google announced support. I didn’t know about it until today, but now I’m interested.
and yet another step closer to chip in hand.
I know what you mean – a step closer to dinner time.
I’d murder a Supermacs Garlic Chip and Cheese now.
USB keys are easily abused and people with malicious intentions will find a way to turn them into a tool for themselves.
Takes up a USB port. Google Authenticator app is still a better choice at present.
Can you still log into gmail without this extra layer and key ? going forward ? What do yee reckon ?
Yes you will be able to keep using a password on its own but you really shouldn’t. This is additional to your password and shouldn’t replace your password. It’s similar to using Google authenticator in that regard.
All your sensitive accounts should be protected by 2 factor authentication, ie, not just a password or a device.
have your say