presidential election last year shaped in part by the disclosure of emails belonging to associates of Democratic candidate Hillary Clinton that were obtained through phishing schemes.
The rollout of a suite of new email security services follows a U.S. The program also includes a more laborious and detailed account recovery process to prevent fraudulent access by hackers who try to gain access by pretending they have been locked out.Īlthough Google has previously supported the use of security keys for what is known as two-factor authentication, advanced protection users will have no backup log-in method available if they lose their keys other than the fuller account recovery process. Mobile log-ins will require a Bluetooth wireless device.Īdvanced protection users will have their data walled off from access by any non-Google third-party applications, such as the Apple iOS mail client or Microsoft Outlook. The advanced protection features include an option to require a physical USB security key to connect to a desktop computer before each log-in as a way to verify a user's identity. Google users will have the ability to opt in to security settings aimed at protecting Gmail, Google Drive and YouTube data from phishing attacks. The $20 Yubikey that can be used on a desktop computer Microsoft says it expects to roll out updates to its flagship Edge browser to support U2F later this year.Īpple has not yet said when or if it will support the standard in its Safari browser.įor non employees Alphabet's Google offers an 'advanced protection program' to provide stronger email security for some users such as government officials, political activists and journalists who are at a higher risk of being targeted by sophisticated hackers.
Sites including Dropbox, Facebook, Github, and Google's services support the new devices, with more being added daily.Ĭurrently, U2F is supported by Chrome, Firefox, and Opera. The Security Key used by Google uses a form of multi-factor authentication known as Universal 2nd Factor (U2F), which allows the user to complete the login process simply by inserting the USB device and pressing a button on the device. The most common forms of 2FA require the user to supplement a password with a one-time code sent to their mobile device via text message or an app. The idea, known as two-factor authentication, mean even if hackers know your password, they still cannot log in to your account unless they also hack or possess that second factor - usually your phone or USB key.
0 kommentar(er)
