Google today announced it is beefing up its two-step verification feature with Security Key, a physical USB second factor that only works after verifying the login site is truly a Google website. The feature is available in Chrome: instead of typing a code, you can simply insert Security Key into your computer’s USB port and tap it when prompted by Google’s browser.
For those who don’t know, two-step verification requires you to use more than one form of verification to access an account. Typically, this information includes “knowing something” such as a password and “having something” such as a mobile device — in the case of Security Key, the latter is an item specifically meant for authentication, rather than a device you carry around with you regardless.
“When you sign into your Google Account using Chrome and Security Key, you can be sure that the cryptographic signature cannot be phished,” Google promises. While Security Key works with Google Accounts at no charge, you’ll naturally need to go out and buy a compatible USB device directly from a Universal 2nd Factor (U2F) participating vendor.
Since Security Key in Chrome incorporates the open U2F protocol from the FIDO Alliance, other websites with account login systems can use the feature as well. If security is your priority, and you use both Google services and Chrome, Security Key is probably worth your consideration. If you use Chrome but don’t login via Google Account, it’s worth checking to see if your site supports Security Key.
Google says it hopes other browsers will add FIDO U2F support soon (Security Key currently only works with Chrome). The end goal is for FIDO U2F support to go mainstream, so security-sensitive users can carry a single Security Key that works everywhere.
More to follow.
Google’s innovative search technologies connect millions of people around the world with information every day. Founded in 1998 by Stanford Ph.D. students Larry Page and Sergey Brin, Google today is a top web property in all major glob… read more »
Powered by VBProfiles
Mobile developer or publisher? VentureBeat is studying mobile marketing automation. Fill out our 5-minute survey, and we’ll share the data with you.