Google now treats iPhones as physical security keys
2Reported today on The Verge
For the full article visit: https://www.theverge.com/2020/1/15/21066768/google-iphone-ios-security-key-2-factor-authentication
Reported today in The Verge.
Google now treats iPhones as physical security keys
The latest update to Google's Smart Lock app on iOS means you can now use your iPhone as a physical 2FA security key for logging into Google's first-party services in Chrome. Once it's set up, attempting to log in to a Google service on, say, a laptop, will generate a push notification on your nearby iPhone. You'll then need to unlock your Bluetooth-enabled iPhone and tap a button in Google's app to authenticate before the login process on your laptop completes. The news was first reported by 9to5Google.
Two-factor authentication is one of the most important steps you can take to secure your online accounts, and provides an additional layer of security beyond a standard username and password. Physical security keys are much more secure than the six digit codes that are in common use today, since these codes can be intercepted almost as easily as passwords themselves. Google already lets you use your Android phone as a physical security key, and now that the functionality is available on iOS it means that anyone with a smartphone now owns a security key without having to buy a dedicated device.
The new process is similar to the existing Google Prompt functionality, but the key difference is that Smart Lock app works over Bluetooth, rather than connecting via the internet. That means your phone will have to be in relatively close proximity to your laptop for the authentication to work, which provides another layer of security. However, the app itself doesn't ask for any biometric authentication - if your phone is already unlocked then a nearby attacker could theoretically open the app and authenticate the login attempt.
According to one cryptogopher working at Google, the new functionality