Google enhances protections for iOS users with physical security keys

The physical keys use passwordless authentication, which is stronger than using your mobile phone or text messages

Adam Smith
Thursday 04 June 2020 08:05 EDT
Comments
(Credit: Yubico)

Your support helps us to tell the story

From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.

At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.

The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.

Your support makes all the difference.

Google is rolling out an update to its online services and apps on Apple’s iPhone that makes them more secure.

In a blog post the search giant explained that it is enabling native support for the W3C WebAuthn implementation for Google Accounts. These will support NFC, USB-C, and Lightning keys.

WebAuthn security is passwordless authentication. Rather than using another device, or your phone number, for two-factor authentication, this allows you to use a physical USB key to verify your identity. These are generally safer, as text messages can be intercepted by hackers and not everyone has multiple devices that can be used for authentication.

NFC stands for Near Field Communication, which is used for quick communication between devices. Services such as Google Pay or Apple Pay use NFC to send payments.

Security keys which work for users include:

  • Both the USB-A and Bluetooth Titan Security Keys, which have NFC functionality built-in. This allows you to tap your key to the back of your iPhone when prompted at sign-in.
  • A Lightning security key like the YubiKey 5Ci or any USB security key if you have an Apple Lightning to USB Camera Adapter.
  • A USB-C security key plugged directly to an iOS device that has a USB-C port (such as an iPad Pro)

Google also suggests using these keys alongside a the accompanying smart lock apps in order your iPhone as a key for users’ Google accounts, via Bluetooth security keys or the device’s built-in security key.

Previously, Google offered limited support for iOS users with security keys, but these only worked via Bluetooth and had to be used with Google’s Smart Lock application. With the rollout of iOS 13.3, Apple has added native support for USB-C, NFC, and Lightning security keys to make the process easier.

Security key maker Yubico said that the update for iOS “opens the door to every single Google user, to heighten their mobile security”, as accounts that are enrolled with Google’s its Advanced Protection Program have reportedly seen no evidence of a successful phishing attempt.

As well as Google accounts, security keys such as these can be used for a number of other accounts including 1Password, Coinbase, Dropbox, Facebook, GitHub, Twitter, and many others.

Join our commenting forum

Join thought-provoking conversations, follow other Independent readers and see their replies

Comments

Thank you for registering

Please refresh the page or navigate to another page on the site to be automatically logged inPlease refresh your browser to be logged in