Google extends two-factor authentication with physical USB keys

Google Chrome gets support for new authentication protocol called Universal 2nd Factor

Google is letting users protect their accounts against password compromises by adding support for two-factor authentication based on physical USB keys.

The new feature expands the company's 2-Step Verification mechanism that is already available for Google accounts, and requires users to input one-time-use codes received via text message or generated with a mobile app when they log in from a new device.

"Today we're adding even stronger protection for particularly security-sensitive individuals," said Nishit Shah, a Google Security product manager, in a blog post. "Security Key is a physical USB second factor that only works after verifying the login site is truly a Google website, not a fake site pretending to be Google."

The Security Key, which is what the special USB devices are called, only works with Chrome version 38 or newer for now. Starting with this version, the browser has built-in support for an open protocol called Universal 2nd Factor (U2F) that was developed by the FIDO Alliance, a multivendor association focused on developing authentication protocols that reduce reliance on passwords.

The good news is that since the protocol is supported by Chrome, other websites besides Google can use it to provide stronger authentication options to their users.

"As more sites and browsers come onboard, security-sensitive users can carry a single Security Key that works everywhere FIDO U2F is supported," Shah said.

The Security Key does more than authenticate the user; it also uses cryptography to ensure that the site a person is trying to use it on is actually the real website and not a phishing page.

Two-factor authentication based on one-time-use codes is stronger than simple password-based authentication, but is still susceptible to phishing attacks. Users can be tricked into inputting both their passwords and their temporary second factor codes on a fake site, allowing attackers to bypass this protection.

Users who want to start using the new authentication method will need to buy a Security Key device from one of the vendors producing them. They're available to order from Amazon.com and possibly other shopping sites and they should have a "FIDO U2F Ready" logo on them.

Join the Good Gear Guide newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection

Tags FIDO Allianceonline safetyGooglesecurityAccess control and authentication

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Lucian Constantin

IDG News Service
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Matthew Stivala

HP OfficeJet 250 Mobile Printer

The HP OfficeJet 250 Mobile Printer is a great device that fits perfectly into my fast paced and mobile lifestyle. My first impression of the printer itself was how incredibly compact and sleek the device was.

Armand Abogado

HP OfficeJet 250 Mobile Printer

Wireless printing from my iPhone was also a handy feature, the whole experience was quick and seamless with no setup requirements - accessed through the default iOS printing menu options.

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Ed Dawson

HP OfficeJet Pro 8730

As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?