Required keys reduce successful phishing attacks on Google

Security keys like Yubikey's allow you to connect to a website simply by plugging it in and pressing a button. You do not even need to type your password, let alone generate a unique code. Although the method has its own weakness, considering that it relies on a physical element that you can lose, it is considered safer than two-factor authentication, especially the type that sends you codes. via SMS. Hackers could intercept messages sent to your device, after all, and access your account that way.

Unfortunately, Universal 2nd Factor (U2F) – that's what you call the type of multi-factor authentication that uses physical keys – is quite limited at the moment. You can already benefit for protection on Chrome, but you will have to manually activate it on Firefox by going first to "about: config". Microsoft will not deploy U2F compatibility for Edge before the end of the year, and Apple has not yet revealed whether Safari will accept the standard. In addition, only a few websites and services can use it, including Facebook and password managers such as Keepass and LastPass. It remains to be seen whether Google's positive experience with the standard can help it become mainstream, but it's certainly the kind of meaningful testimony that could give it a massive boost.