Security Keys Neutralized 100% of Employee Phishing at Google

Google has not had any of its 85,000+ employees successfully phished on their work-related accounts since early 2017, when it began requiring all employees to use physical Security Keys in place of passwords and one-time codes.

 

Security Keys are inexpensive USB-based devices that offer an alternative approach to two-factor authentication (2FA), which requires the user to log in to a Web site using something they know (the password) and something they have (e.g., a mobile device).  (Krebs on Security)

--

 

YubiKey provides excellent security for your on-line accounts. I strongly encourage the use of YubiKey or a similar hardware token on every account that will accept it.